Static task
static1
Behavioral task
behavioral1
Sample
8f519746537c70eed2d62186a834f155.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8f519746537c70eed2d62186a834f155.exe
Resource
win10v2004-20231222-en
General
-
Target
8f519746537c70eed2d62186a834f155
-
Size
40KB
-
MD5
8f519746537c70eed2d62186a834f155
-
SHA1
dbb77a08ce368bf62f5386597f0740679401d9af
-
SHA256
863bccb301519f8829263d9100c18c49cd63dc9b2a3af2bd590dc8441f1797d4
-
SHA512
76f825a90a619cd8da133a42e6b937a035932875215f0c9e89e99cbb1e1454c46213350bf955152f670630859424287c7c5cc7c220c9acf24f6aba18de8a82b6
-
SSDEEP
768:bY9mIg5uoSdIu7qL6o16rMqQwzOz8RczU3Hg7p81IZvTfWh8LHYGQvqHmk:s8Igste6JwKU8RgiHKFCqLjHR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f519746537c70eed2d62186a834f155
Files
-
8f519746537c70eed2d62186a834f155.exe windows:1 windows x86 arch:x86
2cc4efc204fff09a8eabce8c9f3fdcb4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
OpenMutexW
VirtualAlloc
LocalFree
OpenMutexA
GetShortPathNameA
lstrlen
TlsAlloc
LoadLibraryA
GetVolumeInformationW
Sleep
CreateDirectoryW
GetTempPathW
SetCurrentDirectoryW
lstrcmp
GetACP
lstrcat
GetVersion
ExitProcess
CopyFileExW
CopyFileA
GetAtomNameW
GetLongPathNameW
GetLocalTime
user32
LoadImageW
GetMenuState
GetMenu
SetScrollPos
GetQueueStatus
IsWindow
CharUpperW
ShowCaret
SetWindowRgn
gdi32
CreateDIBSection
TextOutW
StretchBlt
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 958B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ