Static task
static1
Behavioral task
behavioral1
Sample
8f755261cc33b86f8bc0537ae9811d6d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8f755261cc33b86f8bc0537ae9811d6d.exe
Resource
win10v2004-20231215-en
General
-
Target
8f755261cc33b86f8bc0537ae9811d6d
-
Size
176KB
-
MD5
8f755261cc33b86f8bc0537ae9811d6d
-
SHA1
c091556da1dbab0c59cf15e73dacd8b98a4ffd6c
-
SHA256
c1cea58198eaba4d7792e78259bb12a8043a07412297e422e288286f7bfc3e74
-
SHA512
2752d908175b0584cd8073c583d7b69aa89dc75ef59ddc23c7b3c5a2cfd8d032f3593eacfc109be82d2e4fc66f24e18f8e38fe2832858755545034eaf6a3be8d
-
SSDEEP
3072:92B9iUaa5rP6vNQUdVyBluxmneDVwNrZfaSwjYOGxKK:s9N5G+UTyBlsDVwsCUK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f755261cc33b86f8bc0537ae9811d6d
Files
-
8f755261cc33b86f8bc0537ae9811d6d.exe windows:4 windows x86 arch:x86
a5aedafd28bf8bfb22f316982dbbe792
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
GetClassNameA
GetParent
GetClassInfoExA
GetDesktopWindow
CopyRect
SetWindowLongA
CreateDialogParamA
MsgWaitForMultipleObjects
GetQueueStatus
CharNextA
PostThreadMessageA
GetWindowTextLengthA
RegisterWindowMessageA
EndPaint
GetWindow
CallWindowProcA
SetWindowTextA
GetFocus
InvalidateRgn
DestroyAcceleratorTable
SetParent
DispatchMessageA
SetTimer
GetSysColor
LoadCursorA
GetWindowTextA
GetDC
ReleaseDC
wsprintfA
FindWindowA
KillTimer
ReleaseCapture
wvsprintfA
IsWindow
GetWindowRect
SendMessageTimeoutA
CreateWindowExA
SetCapture
BeginPaint
RedrawWindow
EqualRect
CreateAcceleratorTableA
MoveWindow
PeekMessageA
DestroyWindow
RegisterClassExA
GetDlgItem
DefWindowProcA
SetFocus
IsChild
GetClientRect
PostMessageA
SetRect
GetActiveWindow
SendMessageA
GetWindowLongA
EnumDisplayDevicesA
UnregisterClassA
InvalidateRect
DrawTextA
SendNotifyMessageA
FillRect
SetWindowPos
wininet
InternetOpenUrlA
InternetReadFile
InternetOpenA
InternetCloseHandle
shell32
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
advapi32
CryptGetHashParam
CryptDestroyKey
CryptDestroyHash
CryptEncrypt
RegQueryValueExA
RegEnumValueA
CryptHashData
CryptCreateHash
RegCreateKeyExA
RegDeleteValueA
CryptAcquireContextA
CryptReleaseContext
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
CryptImportKey
RegSetValueExA
RegEnumKeyExA
RegDeleteKeyA
setupapi
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
gdiplus
GdipFree
GdipCreateBitmapFromFileICM
GdipGetImagePixelFormat
GdipDisposeImage
GdipCreateBitmapFromFile
GdipAlloc
GdipCloneImage
kernel32
GetShortPathNameW
DisableThreadLibraryCalls
LocalAlloc
SetFilePointer
Sleep
GetTickCount
GetProcessAffinityMask
MapViewOfFile
CreateFileW
UnmapViewOfFile
CreateFileA
WideCharToMultiByte
WriteFile
EnumResourceTypesA
GetFileAttributesA
CreateFileMappingA
GetFileSize
GlobalFree
LocalFree
GlobalAlloc
GlobalSize
ReadFile
CloseHandle
shlwapi
PathFileExistsW
PathCombineW
ole32
CoCreateInstance
CLSIDFromProgID
StgOpenStorage
CoTaskMemFree
OleInitialize
OleUninitialize
GetRunningObjectTable
OleLockRunning
CoTaskMemRealloc
CoSetProxyBlanket
CreateBindCtx
StringFromGUID2
CreateStreamOnHGlobal
CoTaskMemAlloc
CoGetClassObject
CreateItemMoniker
CoUninitialize
StgCreateDocfile
BindMoniker
CoInitializeSecurity
CoInitialize
StgIsStorageFile
CLSIDFromString
gdi32
CreateSolidBrush
GetDeviceCaps
GetStockObject
DeleteObject
CreateFontA
CreateDIBitmap
CreateCompatibleDC
GetObjectA
SelectObject
GetDIBits
SetStretchBltMode
CreateDIBSection
RealizePalette
ExtEscape
CreateCompatibleBitmap
StretchDIBits
SelectPalette
BitBlt
DeleteDC
SetBkMode
winmm
timeGetTime
timeSetEvent
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
VerQueryValueA
Sections
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ