Static task
static1
Behavioral task
behavioral1
Sample
b8bb2317bb53b991497300f5d07de89d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8bb2317bb53b991497300f5d07de89d.exe
Resource
win10v2004-20240226-en
General
-
Target
b8bb2317bb53b991497300f5d07de89d
-
Size
329KB
-
MD5
b8bb2317bb53b991497300f5d07de89d
-
SHA1
10e72ab263a5541c85c4dd83f3cf3a758a50037e
-
SHA256
8453fbaf0b7bd2afc8e5bc1c078ff0d94ca2d36ed8951f5c59abca49d5e89009
-
SHA512
31dbfd67739fdde122d10ca1528173932984878beef5c6fc022e2963eb9bfe31b55c6ec48c38fc03d060ca89b118ee184a30bcb28ea870c326c65f424dd12c51
-
SSDEEP
6144:3sSmzkuxWtgjVLRllEE9VFb1f9g5sbtqj/zQvyYsP6toa0GVlV5O:3NmdakVjsr/zAyNpazl6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8bb2317bb53b991497300f5d07de89d
Files
-
b8bb2317bb53b991497300f5d07de89d.exe windows:4 windows x86 arch:x86
86f355ff703f7929ff9b9cee371aaadc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoInitialize
OleCreateStaticFromData
ReleaseStgMedium
CoUninitialize
CoTaskMemRealloc
OleDuplicateData
OleSetContainedObject
StgCreateDocfileOnILockBytes
CoCreateInstance
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
kernel32
GetLocaleInfoA
GetCurrentProcess
LoadLibraryExA
GetComputerNameExW
FlushFileBuffers
OutputDebugStringA
GlobalAlloc
GetCurrentThreadId
GetACP
MultiByteToWideChar
WriteConsoleA
UnhandledExceptionFilter
lstrcmpW
CreateFileA
LoadLibraryW
QueryPerformanceCounter
GetModuleFileNameW
GlobalLock
GetLocaleInfoW
LCMapStringW
CreateFileW
DebugBreakProcess
GetSystemDefaultUILanguage
WriteConsoleW
GetStringTypeW
GlobalUnlock
GetTickCount
FindResourceExW
SizeofResource
GetUserDefaultUILanguage
SetFilePointer
GetStringTypeA
GetSystemTimeAsFileTime
ExitProcess
InterlockedExchange
InterlockedIncrement
lstrlenW
DeleteCriticalSection
LoadResource
GetCPInfo
InitializeCriticalSectionAndSpinCount
GetLastError
MapViewOfFile
WideCharToMultiByte
GetOEMCP
LocalFree
SetLastError
LockResource
FormatMessageW
WriteFile
GetConsoleMode
GetProcAddress
GetConsoleCP
InitializeCriticalSection
CreateFileMappingW
LCMapStringA
MulDiv
FlushInstructionCache
GetModuleHandleW
GetVersionExW
RaiseException
EnterCriticalSection
lstrcmpiW
UnmapViewOfFile
InterlockedDecrement
SetUnhandledExceptionFilter
SearchPathW
FreeLibrary
LeaveCriticalSection
GetConsoleOutputCP
Sleep
GlobalFree
TerminateProcess
GetCurrentProcessId
HeapAlloc
FindResourceW
EnumUILanguagesW
SetStdHandle
LoadLibraryExW
HeapCreate
gdi32
GetObjectW
TextOutW
SetStretchBltMode
CreatePatternBrush
StretchBlt
LineTo
GetTextExtentPointW
SetTextColor
GetTextExtentPoint32W
SetBrushOrgEx
CreateCompatibleBitmap
CreateBitmap
DeleteDC
CreateSolidBrush
MoveToEx
BitBlt
ExtCreatePen
SetBkMode
SelectObject
SetBkColor
CreateFontIndirectW
ExtTextOutW
GetTextMetricsW
CreateCompatibleDC
GetDeviceCaps
PatBlt
DeleteObject
user32
CreateWindowExW
SendMessageW
DialogBoxParamW
CharNextW
ScreenToClient
TranslateAcceleratorW
DestroyWindow
PostMessageW
SetTimer
GetParent
GetActiveWindow
MoveWindow
GetDlgItem
InvalidateRect
SetDlgItemTextW
LoadImageW
GetWindowLongW
DefWindowProcW
KillTimer
GetMessagePos
SetWindowLongW
EnumWindowStationsA
GetClientRect
CallWindowProcW
SetFocus
CheckMenuItem
msimg32
TransparentBlt
Sections
.text Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ