Static task
static1
Behavioral task
behavioral1
Sample
8eb5ed51112bfef9902ef2292c4ac13e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8eb5ed51112bfef9902ef2292c4ac13e.exe
Resource
win10v2004-20231215-en
General
-
Target
8eb5ed51112bfef9902ef2292c4ac13e
-
Size
168KB
-
MD5
8eb5ed51112bfef9902ef2292c4ac13e
-
SHA1
ad225fb8d0f84ab42e559c8f385110e2faf7503e
-
SHA256
6705775b7aa08136d49842b58a7c233f9c192817c88a6d9133cff93f36bc21d8
-
SHA512
336e03f6d784ef204b79372bdba9dc43585cb7410215db8a3f05e6d67b49f69d5f7120e6aed496a64a9e50443ba28ae6abde20d42adee99a4a2ad084b3864a08
-
SSDEEP
1536:IeeGC7XuaNGzJ6bUXNKCN5VAcFDVuPyuI10/PfyA9glH7WG1e7y0Bt8OPhsxtO5k:f6nNBb+5X1WySiWMent8wuPO5Cqu0k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8eb5ed51112bfef9902ef2292c4ac13e
Files
-
8eb5ed51112bfef9902ef2292c4ac13e.exe windows:4 windows x86 arch:x86
ae95eeec0f8f9bd7dc10e88d04b081a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
Module32Next
GetTempPathA
GetEnvironmentVariableA
lstrlenA
GetShortPathNameA
ResumeThread
VirtualAllocEx
lstrcpyA
GetModuleFileNameA
CreateProcessA
LoadResource
Sleep
LoadLibraryA
GetProcAddress
lstrcatA
ReadProcessMemory
GetThreadContext
Process32Next
Process32First
Module32First
CreateToolhelp32Snapshot
FindResourceA
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
WriteFile
GetConsoleCP
GetConsoleMode
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetStdHandle
ReadFile
SetHandleCount
GetFileType
SetFilePointer
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
CloseHandle
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetLocaleInfoW
CreateFileW
SetEndOfFile
user32
MessageBoxA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
Sections
.text Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ