Static task
static1
Behavioral task
behavioral1
Sample
8fcd9147a870a43c9aa1c4fbac3e4a4a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8fcd9147a870a43c9aa1c4fbac3e4a4a.exe
Resource
win10v2004-20231222-en
General
-
Target
8fcd9147a870a43c9aa1c4fbac3e4a4a
-
Size
10KB
-
MD5
8fcd9147a870a43c9aa1c4fbac3e4a4a
-
SHA1
fc5db99616a028d5eb376989f316ac1641d29040
-
SHA256
45e15a32da264a5b971d21ee878796d5ae06aabb5133f0a25e993bfbaffe48ed
-
SHA512
4fffc10d78cbec735c97b70d0b97526ab2831c335147fcbd9454ba8e37056b842325ab36748a5a2a2585c1ba3f527e767a969be2080381fc5ec2de7fcfc288f2
-
SSDEEP
192:iW0QvWMgL3oMTRe+ZUVDlMH5sLcOXq9h:iov7gL3XoV5MZkcOXq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8fcd9147a870a43c9aa1c4fbac3e4a4a
Files
-
8fcd9147a870a43c9aa1c4fbac3e4a4a.exe windows:4 windows x86 arch:x86
0937741ef5bb6775f0ee209bdfab07a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
CreateDirectoryA
GetModuleHandleA
ExitProcess
user32
PostQuitMessage
LoadIconA
MessageBoxA
DefDlgProcA
EnableWindow
GetWindowTextA
RegisterClassA
CreateDialogParamA
SetWindowTextA
GetDlgItem
SetDlgItemTextA
SendMessageA
GetWindowLongA
SetWindowLongA
ShowWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
CallWindowProcA
DestroyWindow
advapi32
RegCloseKey
RegFlushKey
RegSetValueExA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegCreateKeyExA
RegQueryValueExA
msvcrt
__mb_cur_max
strncpy
strncat
_pctype
_isctype
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ