Static task
static1
Behavioral task
behavioral1
Sample
8fbd9df942f4519d8145fcf9287faf74.exe
Resource
win7-20231215-en
General
-
Target
8fbd9df942f4519d8145fcf9287faf74
-
Size
9KB
-
MD5
8fbd9df942f4519d8145fcf9287faf74
-
SHA1
f1502b8df16db12185b1aa2cff8b42307de4488a
-
SHA256
abd1b67cc37d120432e53ef2b3b1b7c270400554ec5243a06f9d55e80cd5da03
-
SHA512
ea18269e49f9170146a629bf679bdf0924c56c200d61c71320535bb44344a30cec189109236e611ab2b4d4e875d4a277db5d80c2a96c946678bbd0cadc723bd8
-
SSDEEP
192:ZKYs4n14nbQpiFNNOpN7k4m0JJ5+6BxfPnMFTX9cx5L:kd414bjNOHw4mOv10j2L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8fbd9df942f4519d8145fcf9287faf74
Files
-
8fbd9df942f4519d8145fcf9287faf74.exe windows:4 windows x86 arch:x86
7e922d4f6ccff6f2b16363df6cbe6055
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CallNamedPipeA
ExitProcess
FindFirstFileA
FormatMessageA
GetConsoleScreenBufferInfo
GetExitCodeThread
GetFileAttributesExW
GetLocaleInfoW
GetModuleHandleW
GetNumberFormatA
GetProcessHeaps
GetShortPathNameW
GlobalUnfix
LoadResource
MapViewOfFile
OpenProfileUserMapping
RequestWakeupLatency
SetCommTimeouts
SetComputerNameA
SetThreadContext
SetVolumeLabelW
SuspendThread
SystemTimeToTzSpecificLocalTime
Toolhelp32ReadProcessMemory
WriteConsoleW
user32
AnyPopup
AttachThreadInput
CallMsgFilter
CreateAcceleratorTableW
CreateCursor
DdeAccessData
DestroyCursor
EnumDisplaySettingsA
GetClassWord
GetCursorInfo
GetMenu
GetScrollBarInfo
IMPSetIMEW
IsZoomed
LoadMenuA
PostMessageW
SendMessageTimeoutA
SetCursor
TranslateAcceleratorA
wsprintfW
gdi32
CopyEnhMetaFileA
CreateMetaFileA
DPtoLP
DeleteDC
GdiComment
GdiSetBatchLimit
GetBitmapDimensionEx
GetCharWidth32W
GetColorAdjustment
GetDeviceCaps
GetFontData
GetObjectA
GetOutlineTextMetricsA
GetRandomRgn
GetTextExtentPoint32A
GetTextFaceW
ScaleViewportExtEx
SetAbortProc
SetColorSpace
SetDIBColorTable
SetViewportExtEx
SetViewportOrgEx
StretchDIBits
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ