X:\mbcwlcjA\ikcVXD\mWrkmqfs.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8f908e31cb7448b8baa6f11a501b28b4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8f908e31cb7448b8baa6f11a501b28b4.exe
Resource
win10v2004-20231215-en
General
-
Target
8f908e31cb7448b8baa6f11a501b28b4
-
Size
111KB
-
MD5
8f908e31cb7448b8baa6f11a501b28b4
-
SHA1
8828b03ebed4cc97225a62cef5d9e352bdfe9d73
-
SHA256
ed8042a59dc4a5d49379bb2973e9d455eeaac76b20ff7dd03bf809dec79f0e5c
-
SHA512
2278faed4a19b8853543e41b487d86712aee5af4be2b213fba4def55af62d7de93933289bc279e81c4697d022b0ab892ffafe080f46e2c07572df3cd46c91565
-
SSDEEP
1536:K87VyMlokh/8apbiBblBaECIjoyB+YNJRD5npKy2fr1X1CXDHAgKrFns0:K85yMlokh/3p+Bg0NJRD5cfr1FCzZKG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f908e31cb7448b8baa6f11a501b28b4
Files
-
8f908e31cb7448b8baa6f11a501b28b4.exe windows:5 windows x86 arch:x86
5aea34bd2360bf0bea55e46c524b5260
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetSystemTimeAdjustment
GetThreadTimes
lstrlenW
LoadLibraryW
CreateMutexA
SleepEx
GetTimeFormatA
CreateFileA
LoadLibraryExA
OpenFileMappingA
lstrcmpiW
GetProcAddress
shlwapi
StrCmpNW
gdi32
ResizePalette
LineDDA
GetNearestColor
CreateEllipticRgnIndirect
CombineRgn
OffsetViewportOrgEx
CreateCompatibleBitmap
GetDIBits
user32
SetScrollRange
GetPropW
ShowScrollBar
ShowCaret
EnumThreadWindows
CopyImage
CreatePopupMenu
IsCharUpperA
AdjustWindowRectEx
GetShellWindow
IsDialogMessageA
GetWindowLongW
Exports
Exports
?nwwtqHewQKApdArhcd@@YG_NGPAD@Z
?TbYhtUmzozDiOfy@@YGXPAG@Z
?uugileBgHcM@@YGDPAIM@Z
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 170B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ