Static task
static1
Behavioral task
behavioral1
Sample
8ec0c8c403c061945f047f3305ea3337.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8ec0c8c403c061945f047f3305ea3337.exe
Resource
win10v2004-20231222-en
General
-
Target
8ec0c8c403c061945f047f3305ea3337
-
Size
744KB
-
MD5
8ec0c8c403c061945f047f3305ea3337
-
SHA1
87b0007882f2b5f3bc0a550e4f98a08b39708364
-
SHA256
9a638e34fabc566b660863c856a7446e29152e3e9f3fe67ea8ceb895eb9ca63d
-
SHA512
bef1ba2356c2acc5ad7b5800cd85ebc20f4d79508854720d30a0ea4eb5f33a9f258ca8304a3f159ec6b11d434a93534e60c39af1f36cfdd83c222d608a41b91a
-
SSDEEP
12288:ZcdsEsHFDnACqgymGeVh7Ts7CP7C5r8G+Jfjbl:6RsFnANZmGes7CPWCV9jb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ec0c8c403c061945f047f3305ea3337
Files
-
8ec0c8c403c061945f047f3305ea3337.exe windows:5 windows x86 arch:x86
f9c279f86f2280fe65bcf4363ddc8562
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
UpdateWindow
DefWindowProcA
KillTimer
PostQuitMessage
DispatchMessageA
EnableWindow
MessageBoxA
SetWindowLongA
GetCursorPos
SystemParametersInfoA
CheckMenuItem
SendMessageA
GetSubMenu
SetTimer
SetForegroundWindow
kernel32
GetStartupInfoA
LCMapStringW
GetStringTypeW
GetStringTypeA
HeapReAlloc
GetOEMCP
GetACP
EnterCriticalSection
LeaveCriticalSection
SetLastError
TlsGetValue
FindClose
LoadResource
InitializeCriticalSection
LCMapStringA
CloseHandle
ReadFile
TlsFree
MapViewOfFile
GetCPInfo
FreeEnvironmentStringsW
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcessId
SizeofResource
LoadLibraryA
GlobalUnlock
HeapAlloc
QueryPerformanceCounter
GetModuleFileNameW
SetHandleCount
ReleaseMutex
HeapFree
GetProcessHeap
VirtualAlloc
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
InterlockedDecrement
InterlockedIncrement
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 695KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE