Static task
static1
Behavioral task
behavioral1
Sample
8ee06d4e9b85d01e1eca29b7551a76f4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8ee06d4e9b85d01e1eca29b7551a76f4.exe
Resource
win10v2004-20231215-en
General
-
Target
8ee06d4e9b85d01e1eca29b7551a76f4
-
Size
157KB
-
MD5
8ee06d4e9b85d01e1eca29b7551a76f4
-
SHA1
f1fc9016a04718be4a91add62c5ac83dd8ffd63e
-
SHA256
dbc67a03e294ddfc68e91d8d1a7688baa987eee18800d0a1df8d366ec3acb2c5
-
SHA512
2eb890524de68a61bc49f6546d76e3b0a30421f2138405bfc204966ac47f9e9ab6d7404ce99caa1c07938dc21d32c2d44c4df296e8ed6d93be9bfd9bcab59f94
-
SSDEEP
3072:ID2YfwHS9afQXfpU523++Xrby1CktubTTPJPnWHkzUCemskECp6re:BHZfMfS523+pY+4TTP9WHkzUCXsOp6r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ee06d4e9b85d01e1eca29b7551a76f4
Files
-
8ee06d4e9b85d01e1eca29b7551a76f4.exe windows:4 windows x86 arch:x86
395043b57d6a916d109bdfc538d55307
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FreeLibrary
LocalFileTimeToFileTime
GetNextVDMCommand
SystemTimeToFileTime
FindFirstFileW
SetThreadPriority
FindResourceW
CompareStringA
FileTimeToSystemTime
FindNextFileW
EnumResourceNamesW
GetShortPathNameW
SetEnvironmentVariableW
SetCurrentDirectoryW
GetLocalTime
SetErrorMode
RegisterWaitForSingleObject
GetStringTypeW
FindClose
LoadResource
FileTimeToLocalFileTime
SearchPathW
user32
ValidateRgn
ValidateRect
ReleaseCapture
ExcludeUpdateRgn
RealGetWindowClassA
SetCapture
InvalidateRgn
GetCapture
GetUpdateRgn
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ