Static task
static1
Behavioral task
behavioral1
Sample
8d157d8d2166e291e8cd0b34f634f327.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8d157d8d2166e291e8cd0b34f634f327.exe
Resource
win10v2004-20231222-en
General
-
Target
8d157d8d2166e291e8cd0b34f634f327
-
Size
204KB
-
MD5
8d157d8d2166e291e8cd0b34f634f327
-
SHA1
20800b652fd0056c7e272a2e7c88bfe74782e74c
-
SHA256
e51ae250950d3c7967d4c025ede2645735103efeb3f90f034a03d867e8b2ff5c
-
SHA512
bbcaa0118f9fdc0e4dc16d96fffb1bf632365191e96131aa3624ed0208d7331dd8226722aab04dcc489c2d15079172b5148b519b289887682b2b23a067457af0
-
SSDEEP
96:XRbOQ+2yoOQ+2yw7MNJLb++u69Td1HRaC3Hl44/WbYEX1a:XRqNmeB++u+Td1HFV1/WbYEXY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d157d8d2166e291e8cd0b34f634f327
Files
-
8d157d8d2166e291e8cd0b34f634f327.exe windows:0 windows x86 arch:x86
80a17c5f279c885a5abd4b20a31b48da
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
AddConsoleAliasA
AddConsoleAliasW
BackupWrite
BaseDumpAppcompatCache
BasepCheckWinSaferRestrictions
BeginUpdateResourceA
BeginUpdateResourceW
BuildCommDCBA
BuildCommDCBAndTimeoutsA
BuildCommDCBAndTimeoutsW
ClearCommError
CloseHandle
CloseProfileUserMapping
ContinueDebugEvent
CreateFiber
CreateFileA
CreateFileMappingA
CreateHardLinkA
CreateMutexW
CreateNlsSecurityDescriptor
CreateRemoteThread
CreateSocketHandle
CreateThread
DeleteAtom
DeleteFileW
DeleteTimerQueueTimer
DeleteVolumeMountPointA
EnumCalendarInfoW
EnumDateFormatsExA
EnumResourceLanguagesW
EnumResourceNamesA
EnumResourceTypesW
EnumUILanguagesW
EnumerateLocalComputerNamesA
ExpandEnvironmentStringsA
FatalExit
FileTimeToLocalFileTime
FindActCtxSectionStringA
FindFirstVolumeMountPointW
FlushConsoleInputBuffer
FoldStringW
FreeLibrary
FreeVirtualBuffer
GetBinaryTypeW
GetCPFileNameFromRegistry
GetCPInfo
GetCalendarInfoA
GetConsoleAliasA
GetConsoleCursorInfo
GetCurrentActCtx
GetDefaultCommConfigW
GetEnvironmentStringsA
GetExpandedNameA
GetFileAttributesW
GetFileInformationByHandle
GetGeoInfoA
GetHandleContext
GetHandleInformation
GetLinguistLangSize
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleExA
GetNumaProcessorMap
GetNumberFormatA
GetNumberOfConsoleFonts
GetPrivateProfileSectionNamesA
GetProcAddress
GetProcessHeaps
GetProfileStringA
GetStringTypeExW
GetSystemRegistryQuota
GetSystemTime
GetSystemWindowsDirectoryA
GetTapePosition
GetThreadPriority
GetThreadTimes
GetVolumeNameForVolumeMountPointW
GetVolumePathNamesForVolumeNameW
GlobalLock
HeapCreate
InterlockedFlushSList
InterlockedIncrement
IsBadStringPtrW
IsValidLanguageGroup
IsValidLocale
LeaveCriticalSection
LoadLibraryA
LoadModule
LocalAlloc
LocalShrink
LockFileEx
Module32First
MoveFileWithProgressW
NlsResetProcessLocale
OpenEventA
OpenMutexA
OpenProcess
OutputDebugStringA
ProcessIdToSessionId
QueryMemoryResourceNotification
ReadConsoleInputA
ReadConsoleOutputCharacterW
ReadProcessMemory
RegisterWowExec
ReleaseActCtx
RemoveVectoredExceptionHandler
SetComputerNameA
SetConsoleActiveScreenBuffer
SetConsoleFont
SetConsoleHardwareState
SetConsoleIcon
SetConsoleScreenBufferSize
SetDefaultCommConfigA
SetDefaultCommConfigW
SetFileAttributesA
SetFilePointer
SetProcessAffinityMask
SetProcessWorkingSetSize
SetThreadPriority
SetThreadUILanguage
SetUnhandledExceptionFilter
SetWaitableTimer
SuspendThread
TerminateThread
TermsrvAppInstallMode
TlsAlloc
UTRegister
UnregisterConsoleIME
VDMOperationStarted
ValidateLCType
VirtualFreeEx
WaitNamedPipeW
WinExec
WriteConsoleOutputA
WritePrivateProfileStringA
WritePrivateProfileStructW
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpyW
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ