Static task
static1
Behavioral task
behavioral1
Sample
8dd6f8fd967a5253d34ed2225c64e3d9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8dd6f8fd967a5253d34ed2225c64e3d9.exe
Resource
win10v2004-20231222-en
General
-
Target
8dd6f8fd967a5253d34ed2225c64e3d9
-
Size
123KB
-
MD5
8dd6f8fd967a5253d34ed2225c64e3d9
-
SHA1
26c052257e611912dfebf1d40f7d7e65eb62a8f0
-
SHA256
e31216a0105ea2125b84f456a33d000b1b516ad4ae8ee57b6d460ffa4ff493b5
-
SHA512
a5de7ffd49af033f7980c621dfe653183c2a61649f3cb08a077bd57b9dbaa2d16d2d9f6c5667c087d0df4d906c0fc8a41f627bbc76a72a96457358ba289b6062
-
SSDEEP
3072:sil+9iSDMh3/MOe+rmsTouniB+FdVrOaySVM:NlciSDCje+rmhuRbrOEq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8dd6f8fd967a5253d34ed2225c64e3d9
Files
-
8dd6f8fd967a5253d34ed2225c64e3d9.exe windows:4 windows x86 arch:x86
0129d95547e02f486bdaeeebb3976701
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
FreeEnvironmentStringsA
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings
user32
TranslateMessage
GetMessageA
DispatchMessageA
oleaut32
VarRound
ole32
CreateObjrefMoniker
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ