Static task
static1
Behavioral task
behavioral1
Sample
8f6aa4cb3bf4867fc22d92ae9ab29c38.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8f6aa4cb3bf4867fc22d92ae9ab29c38.exe
Resource
win10v2004-20231215-en
General
-
Target
8f6aa4cb3bf4867fc22d92ae9ab29c38
-
Size
758KB
-
MD5
8f6aa4cb3bf4867fc22d92ae9ab29c38
-
SHA1
24d941458852d0c2be2ceb2bb72b64eee14ae97f
-
SHA256
d0b3bb80d7b266dc7ef3cb89d4c91ba6df222e2980f35cce36d22d362b5dcf13
-
SHA512
e3db618b35aec5a4f4da02172932c7a2b7af55f694cfd914ab3778124787245492c25948be93d07d180c32459a7239b25f52f2f6fffe5ce84abbe263e0889b39
-
SSDEEP
12288:vn+Hu+rPXRsv1GbgdPlotdZ19HdRrWr0WqgFxr8FRuhBFOXAbXjxYzXuK4F:P+O+rfW/dOpHdEAW9FuFw7hXjmj6F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f6aa4cb3bf4867fc22d92ae9ab29c38
Files
-
8f6aa4cb3bf4867fc22d92ae9ab29c38.exe windows:4 windows x86 arch:x86
ba5aecb45dd9a89321c7a6ee7ba6e748
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetDC
gdi32
SaveDC
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
DragFinish
comctl32
ord17
ole32
CoInitialize
oleaut32
SysFreeString
winmm
timeSetEvent
shlwapi
PathIsURLW
wininet
InternetOpenW
Sections
.MPRESS1 Size: 591KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE