Static task
static1
Behavioral task
behavioral1
Sample
8e012dff1f1011ece471628aebb43804.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8e012dff1f1011ece471628aebb43804.exe
Resource
win10v2004-20231222-en
General
-
Target
8e012dff1f1011ece471628aebb43804
-
Size
264KB
-
MD5
8e012dff1f1011ece471628aebb43804
-
SHA1
173331a6c8e4fa543b5dfe5f4296d8162f53cb53
-
SHA256
7a6c14f3f0d05f414878ae642f796285e66e1f53317355bec951d0a5ccde192b
-
SHA512
f95db86c7237aef34cfff360a2bd1ab2ad1250cebaf65fdd831f912af7a1f25f694b7a4eb22d65539ac327d20a8cc85cf7c05cc83c73da287343a643296bdacc
-
SSDEEP
6144:n351BpO2HqpH5GUCeBu2bQHU01JzjbSnIYbkI50f:3BppHGXCYI00nfbiwI50f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e012dff1f1011ece471628aebb43804
Files
-
8e012dff1f1011ece471628aebb43804.exe windows:5 windows x86 arch:x86
5152ae5655381d7ec3cf0cfbff896ac8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GlobalFree
CloseHandle
DeleteFileW
HeapAlloc
SetConsoleMode
advapi32
RegOpenKeyExW
GetPrivateObjectSecurity
IsTextUnicode
Sections
.adwzqz Size: 38KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.juzgf Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.loj Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ