Static task
static1
Behavioral task
behavioral1
Sample
8e30437f06832f8d820af5e0111ea072.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8e30437f06832f8d820af5e0111ea072.exe
Resource
win10v2004-20231215-en
General
-
Target
8e30437f06832f8d820af5e0111ea072
-
Size
16KB
-
MD5
8e30437f06832f8d820af5e0111ea072
-
SHA1
8f9373d2ed7c77c70e42de95fc80cd12eb8f80cc
-
SHA256
ca9699a23d2a9c4378f8b6ce9af811886c2077faf99e3a261db4c3c3883a661b
-
SHA512
e894350505feeeff18ee1eb32ea667ecaf7844f2b37315875177299036b7496707e564154820fa09a9515e24d09196de405224cf55e758f4086a75dbe36b4b18
-
SSDEEP
192:BYUE6IOlwHuFxJeB3Cb1V85+zIMVSH8SMXSM+rhxs5Yr7vmnSXjtfRvww4SA3Wpx:BYUE6FyHuNeZSXOW1SM+rhrHBzjw9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e30437f06832f8d820af5e0111ea072
Files
-
8e30437f06832f8d820af5e0111ea072.exe windows:1 windows x86 arch:x86
8e2511601bab65631019250406eb1ed2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CloseDesktop
DrawStateA
FlashWindow
wsock32
htons
sethostname
WSAStartup
ioctlsocket
bind
htonl
SetServiceA
gethostbyaddr
WSAIsBlocking
urlmon
IsValidURL
CreateAsyncBindCtx
DllCanUnloadNow
IsAsyncMoniker
ZonesReInit
IsValidURL
URLDownloadW
Sections
����t Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE