Static task
static1
Behavioral task
behavioral1
Sample
8ee238ab5c63a9bafbd5c2df7dffe6c3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8ee238ab5c63a9bafbd5c2df7dffe6c3.exe
Resource
win10v2004-20231215-en
General
-
Target
8ee238ab5c63a9bafbd5c2df7dffe6c3
-
Size
28KB
-
MD5
8ee238ab5c63a9bafbd5c2df7dffe6c3
-
SHA1
5a5dd11e426363ffe7c04ffd9eaf97608dd06d15
-
SHA256
597620ec15ecb4d1aeabb44011ede1311ebaa384dabfa57188ab4fe23266568b
-
SHA512
0a7e329ce9c8514babbe43f8005297a5b8d246183ed98f8f4349d2aaa20b7cb448d6950d29ce799f4abc798a288053cb5dd72248ad0e3adfb03e69f180990f98
-
SSDEEP
384:qipp6r++beg0hkqaJW+1ogoF4ZU0Z1i1kp5kMINqbjOKG:J2+2nPD1VZBniOp5DVbjnG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ee238ab5c63a9bafbd5c2df7dffe6c3
Files
-
8ee238ab5c63a9bafbd5c2df7dffe6c3.exe windows:4 windows x86 arch:x86
aad06cd6a5371eda2af28a0aebfe9cd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
GetExitCodeProcess
FindResourceA
CloseHandle
DeleteAtom
lstrlenW
CreateFileA
LoadLibraryExW
CreateMutexA
GlobalFree
GlobalUnlock
VirtualQuery
ReleaseMutex
GetCurrentThreadId
SetLastError
HeapCreate
SetEnvironmentVariableA
GetModuleHandleA
GetStdHandle
GetPriorityClass
user32
GetIconInfo
CreateWindowExA
FillRect
CheckRadioButton
CreateMenu
DispatchMessageA
SetFocus
IsWindow
GetDlgItem
GetDC
CallWindowProcA
DrawEdge
DrawMenuBar
ntshrui
GetLocalPathFromNetResourceA
SetFolderPermissionsForSharing
GetNetResourceFromLocalPathA
IsPathSharedA
IsPathSharedW
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qxogolh Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE