Static task
static1
Behavioral task
behavioral1
Sample
b8ba5373f7689408ed68ee1d4beef758.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8ba5373f7689408ed68ee1d4beef758.exe
Resource
win10v2004-20240226-en
General
-
Target
b8ba5373f7689408ed68ee1d4beef758
-
Size
163KB
-
MD5
b8ba5373f7689408ed68ee1d4beef758
-
SHA1
1b6734210c6d90d502109976ac177082e69059bd
-
SHA256
390fcd54b16e9e0695355f7cb99faec3ccd3f51255022b63fb50a2a844a4a503
-
SHA512
439d3907faa6cf33c71857e323fe27bd1d3b8b2cd999ded3007ae45809a107e99c8ed2484e563c7a371f26db125ce8627e59e88fe1cebb69e835bff35a46ccac
-
SSDEEP
3072:E6+A/2WypTwvvIyGT7SMewk7QZ6UEnvN70JNC7+cDXJ6/wronYOpqjHpJ:z+A/upTwvvFy7dhl6UGl70JNC79JspMP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8ba5373f7689408ed68ee1d4beef758
Files
-
b8ba5373f7689408ed68ee1d4beef758.exe windows:4 windows x86 arch:x86
1b8508deff30d51c611b00d3f9e23dc2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GlobalUnlock
GetStdHandle
GetProfileIntA
CompareFileTime
GetModuleHandleA
LoadLibraryExA
CloseHandle
AddAtomA
GetTickCount
WaitForSingleObject
SuspendThread
GetCommandLineA
GetConsoleCP
HeapCreate
GetSystemDefaultLangID
HeapReAlloc
InterlockedExchange
WaitForMultipleObjects
GetVersion
lstrlenA
user32
PostMessageA
PaintDesktop
TranslateMessage
ShowWindow
DestroyMenu
InsertMenuA
CopyRect
UpdateWindow
SubtractRect
FindWindowA
GetMenuStringA
GetKeyboardLayout
EqualRect
EnableScrollBar
SetPropA
SetWindowPos
ModifyMenuA
DialogBoxParamA
MessageBoxA
DispatchMessageA
CreateCaret
GetWindowTextA
GetKeyState
GetDlgItem
CreateCursor
atl
AtlUnadvise
AtlAdvise
AtlSetErrorInfo
AtlModuleInit
AtlGetVersion
dnsapi
DnsStatusString
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ