Static task
static1
Behavioral task
behavioral1
Sample
8ea0805b30d2c2bda41e42c1781745c1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8ea0805b30d2c2bda41e42c1781745c1.exe
Resource
win10v2004-20231222-en
General
-
Target
8ea0805b30d2c2bda41e42c1781745c1
-
Size
18KB
-
MD5
8ea0805b30d2c2bda41e42c1781745c1
-
SHA1
7612706686f7cd2441436dea4b0126842bbe364e
-
SHA256
92030233b1b2d69a4e968dafb4bae85d2aa9a48c72c50190202bab6e98c3182d
-
SHA512
813744cf8cefb01ca3fa41cedccc28d55f10a05e912aaba512416ce33372a4652ad031f099ed9c7c6c23ff53649460f44ba1ef1f01024deacef1e0e21c813999
-
SSDEEP
192:6SPZVr8z6BZitu76q4A0Mz2eWEVcQtlKSNPSPcL3/c76NtN0:rRVr8git66fM9ncqKSdlkWx0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ea0805b30d2c2bda41e42c1781745c1
Files
-
8ea0805b30d2c2bda41e42c1781745c1.exe windows:4 windows x86 arch:x86
d2d887fb22fae98b6a3cddf969510c4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForMultipleObjects
GetProfileIntA
LoadLibraryExA
lstrlenA
CloseHandle
AddAtomA
GlobalUnlock
GetVersion
GetTickCount
HeapReAlloc
CompareFileTime
InterlockedExchange
GetCommandLineA
GetSystemDefaultLangID
SuspendThread
HeapCreate
VirtualProtect
GetConsoleCP
GetModuleHandleA
WaitForSingleObject
GetStdHandle
user32
InvertRect
EnableScrollBar
DialogBoxParamA
CreateIcon
DragObject
IsDialogMessage
CopyImage
DrawCaption
FindWindowA
SetWindowPos
SetPropA
GetCursorInfo
DestroyMenu
GetDlgItem
CopyRect
SetScrollInfo
CreateMenu
CreateCaret
MessageBoxA
GetKeyState
GetKeyboardLayout
InsertMenuA
CreateCursor
DispatchMessageA
EqualRect
winmm
PlaySoundA
aux32Message
OpenDriver
auxGetVolume
CloseDriver
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ