Static task
static1
Behavioral task
behavioral1
Sample
8f291df66a9445d678217e03c3f7e008.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8f291df66a9445d678217e03c3f7e008.exe
Resource
win10v2004-20231215-en
General
-
Target
8f291df66a9445d678217e03c3f7e008
-
Size
937KB
-
MD5
8f291df66a9445d678217e03c3f7e008
-
SHA1
bf789e16605f2230c0d0e2edb988d792b29a14f0
-
SHA256
e3642206b6cd3d026c80a6582b39cd6cdde84c6c552607e3c80622c70549a199
-
SHA512
2450911432066943cb6858802e6838475cbb61f18079678c2c89c6e90a9930bea1a9f0093d4396885ab967b86171be54c4203db61ba248256845a58a68766948
-
SSDEEP
24576:yOzk4Jr2V1hpBAP9xaTn+w+T+ZpZMkp8:C4gThDAlxaTn+wAcI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f291df66a9445d678217e03c3f7e008
Files
-
8f291df66a9445d678217e03c3f7e008.exe windows:4 windows x86 arch:x86
1eb3123be4a35f92dc6ce8f9cba373ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
DrawTextA
gdi32
CreateDIBSection
winmm
midiStreamRestart
msimg32
GradientFill
winspool.drv
ClosePrinter
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
ReleaseStgMedium
oleaut32
LoadTypeLi
comctl32
ImageList_EndDrag
ws2_32
getpeername
wldap32
ord29
comdlg32
GetSaveFileNameA
Sections
��F���F Size: 846KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE