Static task
static1
Behavioral task
behavioral1
Sample
8e78899f4ef1e6c36fa75d4dedb2abb1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8e78899f4ef1e6c36fa75d4dedb2abb1.exe
Resource
win10v2004-20231222-en
General
-
Target
8e78899f4ef1e6c36fa75d4dedb2abb1
-
Size
181KB
-
MD5
8e78899f4ef1e6c36fa75d4dedb2abb1
-
SHA1
b367fe14677e848da953b36bf0b764b0139740b9
-
SHA256
9b9a21e5a621a213e6c856645ea952729afbb4a1d7f3cf97d6222638be2e5fa7
-
SHA512
34178d3bae24061664e53c326b8a460463a47af7d93ada6856f3c3800cda2f6395ffe6236c370eaaeb37e82c239bbb3c90dee83daddff840b5f1cdfec2414eb8
-
SSDEEP
3072:0ADKoxOmJfB/La4ISbWixyRiQJF0BYXRnn8HSMXAVdTV+UD2ke:BJw4IiWi+tXcBAblC1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e78899f4ef1e6c36fa75d4dedb2abb1
Files
-
8e78899f4ef1e6c36fa75d4dedb2abb1.exe windows:4 windows x86 arch:x86
6f931cdd6b8a5047521cf258b7531acc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesW
SetComputerNameExW
DosPathToSessionPathA
GetDateFormatW
SystemTimeToTzSpecificLocalTime
GetCommandLineA
ExitProcess
GetStartupInfoA
user32
EnumDisplaySettingsA
CopyIcon
GetActiveWindow
SetInternalWindowPos
ChangeDisplaySettingsExW
UnlockWindowStation
GetClipboardViewer
RegisterSystemThread
GetMonitorInfoW
GetMenu
CreateIconFromResource
LoadIconW
GetCaretBlinkTime
MoveWindow
EnumWindowStationsW
ImpersonateDdeClientWindow
InvalidateRgn
GetProgmanWindow
CliImmSetHotKey
shell32
SHGetFolderPathW
gdi32
EngCheckAbort
StretchBlt
SetICMProfileA
GetTextExtentPoint32A
GdiEntry14
ExtTextOutA
ExcludeClipRect
GetCharacterPlacementA
EngFillPath
CreateColorSpaceW
SelectClipPath
GdiDllInitialize
OffsetClipRgn
Sections
.code Size: 5KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 172KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE