Static task
static1
Behavioral task
behavioral1
Sample
8e138b888c1b730fc3e9b1c1a1d68038.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8e138b888c1b730fc3e9b1c1a1d68038.exe
Resource
win10v2004-20231222-en
General
-
Target
8e138b888c1b730fc3e9b1c1a1d68038
-
Size
463KB
-
MD5
8e138b888c1b730fc3e9b1c1a1d68038
-
SHA1
d7884d0cf01a3f276398b1320fd2c894c35bf917
-
SHA256
825f39d2ad53eb20dae0ca392cb96b803307cbf7c510406dc0fed73dde3852f2
-
SHA512
020a2f276240cf6b20911c84f300e8cde21c8ac5386f4f66e54d0373909d3c354d9fd4a0f5728ca1c4071916473a51c727a2348a6455f233acc8db09d1819de5
-
SSDEEP
12288:UxV1uvxn6gQVTjdl/KdJ5Hu+SUmkG5sJR6bC:Guv09T2JNuomp+JI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e138b888c1b730fc3e9b1c1a1d68038
Files
-
8e138b888c1b730fc3e9b1c1a1d68038.exe windows:4 windows x86 arch:x86
c72cfd84733f0e08f18fb584e406cd5e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ReplaceTextW
wininet
ShowClientAuthCerts
ResumeSuspendedDownload
FtpRemoveDirectoryA
InternetCrackUrlW
user32
MessageBoxA
SetMenuContextHelpId
RegisterWindowMessageA
RegisterClassExA
RegisterClassA
GetDlgItemTextA
CreateWindowExA
ShowWindow
kernel32
SetFilePointer
QueryPerformanceCounter
DebugBreak
GetEnvironmentStrings
MultiByteToWideChar
GetUserDefaultLCID
LeaveCriticalSection
WriteConsoleW
GetModuleFileNameA
SetHandleCount
MapViewOfFile
LockResource
HeapReAlloc
InterlockedExchange
IsValidLocale
RtlUnwind
VirtualQueryEx
IsValidCodePage
LCMapStringW
GetLocaleInfoW
GetLocaleInfoA
InitializeCriticalSection
VirtualFreeEx
FlushFileBuffers
CloseHandle
GetOEMCP
SetLastError
LoadLibraryW
SetUnhandledExceptionFilter
GetCurrentProcess
GetModuleHandleA
WriteConsoleA
GetConsoleMode
FreeEnvironmentStringsA
GetLastError
WriteConsoleInputW
GetVersionExA
GetStdHandle
TerminateProcess
GetCPInfo
EnumSystemLocalesA
CreateMutexA
GetCommandLineA
GetConsoleOutputCP
HeapDestroy
GetFileType
InterlockedDecrement
LocalFlags
LCMapStringA
FreeEnvironmentStringsW
UnhandledExceptionFilter
GetStringTypeW
OutputDebugStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
SetConsoleCtrlHandler
OutputDebugStringW
GetTimeZoneInformation
GetStartupInfoW
LoadLibraryA
EnterCriticalSection
GetProfileIntA
lstrlenA
ExitProcess
lstrcatA
GetProcessHeap
RaiseException
CompareStringW
GetCommandLineW
GetCurrentThreadId
GetComputerNameW
HeapValidate
GetLongPathNameA
GetStringTypeA
IsBadReadPtr
VirtualAlloc
CreateFileA
WriteFile
GetProcAddress
GetTickCount
VirtualProtect
GetConsoleCP
VirtualFree
WideCharToMultiByte
InterlockedIncrement
HeapAlloc
VirtualQuery
lstrlenW
SetEnvironmentVariableA
TlsAlloc
ReadFile
DeleteCriticalSection
WriteConsoleOutputW
GetProfileSectionA
IsDebuggerPresent
GlobalUnfix
TlsGetValue
GetPrivateProfileSectionW
GetACP
GetCurrentThread
SetStdHandle
TransmitCommChar
OpenMutexA
GetDateFormatA
GetStartupInfoA
TlsSetValue
TlsFree
GetEnvironmentStringsW
WriteConsoleOutputAttribute
HeapFree
CompareStringA
GetTimeFormatA
CreateFileW
HeapCreate
GetModuleFileNameW
FreeLibrary
comctl32
InitCommonControlsEx
ImageList_Write
gdi32
GetCharWidthFloatA
CreateHalftonePalette
GetDeviceCaps
DeleteDC
GetTextExtentPoint32A
StartDocA
GetCharWidthW
GetKerningPairsA
CreateColorSpaceA
GetFontLanguageInfo
SetICMMode
FixBrushOrgEx
StartDocW
AbortPath
GetViewportExtEx
CreateDCW
RectInRegion
Pie
GetCurrentPositionEx
GetMetaFileA
Sections
.text Size: 303KB - Virtual size: 303KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ