Static task
static1
Behavioral task
behavioral1
Sample
b8b03db9861a03e1304b10f93c7fbcfd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8b03db9861a03e1304b10f93c7fbcfd.exe
Resource
win10v2004-20240226-en
General
-
Target
b8b03db9861a03e1304b10f93c7fbcfd
-
Size
60KB
-
MD5
b8b03db9861a03e1304b10f93c7fbcfd
-
SHA1
015df38598cee30963444b0cab06b3c7cf799918
-
SHA256
112310765c0ed4e951d97641a99035cd5127b8b48b4617f0aab19b3599d7b361
-
SHA512
5c116c2267ceb497c019bc5171e30e3e46b23219fa0f83b4d385dbc86af2c8ce0d3343788f047d9d789e8b84e5bc652061b7cb9ac6fdca0c5a65ce1ca079f681
-
SSDEEP
768:F3haE8tM5cGo9zGZVyq2c0+4NwV4UzoFdWG5rVfwye1uDYuzyeO3tstwDS1MX4qg:yE8eyvptjNPpFoefhIZ/eOdccUMoi+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8b03db9861a03e1304b10f93c7fbcfd
Files
-
b8b03db9861a03e1304b10f93c7fbcfd.exe windows:4 windows x86 arch:x86
4d7a817f8968ce681507d221bf898c49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateSemaphoreA
ExitProcess
GetCommProperties
GetDefaultCommConfigA
GetDiskFreeSpaceExW
GetEnvironmentVariableW
GetFileSize
GetLogicalDrives
GetPrivateProfileIntW
GetPrivateProfileSectionNamesW
GetPrivateProfileSectionW
GetSystemInfo
GlobalAddAtomW
GlobalFix
IsBadCodePtr
LCMapStringA
LocalCompact
MoveFileA
ReadFileEx
SetConsoleOutputCP
SetDefaultCommConfigA
SetFilePointer
SetLastError
SetSystemTimeAdjustment
SetTimeZoneInformation
SystemTimeToFileTime
VirtualLock
WriteProfileStringW
lstrcmpA
advapi32
AddAuditAccessAce
ConvertSecurityDescriptorToAccessW
CopySid
CreateServiceA
CryptDeriveKey
CryptEnumProviderTypesA
CryptSetProviderA
CryptSignHashW
DeleteAce
EqualSid
GetAccessPermissionsForObjectW
GetLengthSid
GetMultipleTrusteeOperationW
GetNamedSecurityInfoExA
GetNamedSecurityInfoExW
GetSidSubAuthorityCount
InitializeSecurityDescriptor
LookupPrivilegeDisplayNameA
NotifyChangeEventLog
ObjectCloseAuditAlarmW
ObjectOpenAuditAlarmA
ObjectPrivilegeAuditAlarmW
OpenServiceW
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExA
RegQueryValueA
RegSetKeySecurity
SetSecurityDescriptorOwner
TrusteeAccessToObjectA
gdi32
Arc
CombineRgn
CreateColorSpaceW
CreateDIBitmap
CreateEnhMetaFileA
ExcludeClipRect
ExtCreateRegion
ExtTextOutW
GetBkColor
GetCharWidthA
GetICMProfileA
GetOutlineTextMetricsA
GetTextExtentExPointA
GetWindowOrgEx
PlayMetaFile
ResetDCA
SelectClipRgn
SetDIBitsToDevice
SetMapMode
SetPaletteEntries
Sections
.text Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ