Static task
static1
Behavioral task
behavioral1
Sample
b8e6acf05e3291cc5881ed1db8c2f0ea.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8e6acf05e3291cc5881ed1db8c2f0ea.exe
Resource
win10v2004-20240226-en
General
-
Target
b8e6acf05e3291cc5881ed1db8c2f0ea
-
Size
462KB
-
MD5
b8e6acf05e3291cc5881ed1db8c2f0ea
-
SHA1
05c0887f241e65a47b39d0a60181e15a9ac5d9b3
-
SHA256
66fb2a58bd290719c464e432e9c86cb05e82e353fa8d3bb82aee6e42f5084d95
-
SHA512
957d0b6cd08065ba994590c947d74ba2032392acabb7bc76e5948995802365318328e002872e35c9fc1621c3bdb39b107f41eb8e8653c80d9eb9063ff38ad1e2
-
SSDEEP
12288:vIb3z+sisUGWyvhfyGzJIQ0IXjTsYoWPGlJp126Tb9/i2YPLZ8+PHXq:Bmv5o8Gf9/RCVXq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8e6acf05e3291cc5881ed1db8c2f0ea
Files
-
b8e6acf05e3291cc5881ed1db8c2f0ea.exe windows:4 windows x86 arch:x86
7cb1b0a4d083116ae01fabd19e6a014c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetLastError
FreeLibrary
LoadLibraryExA
LoadLibraryA
AreFileApisANSI
LoadLibraryExW
LoadLibraryW
GetModuleFileNameA
GetModuleFileNameW
LocalFree
FormatMessageA
FormatMessageW
GetWindowsDirectoryA
GetSystemDirectoryA
GetWindowsDirectoryW
GetSystemDirectoryW
CloseHandle
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
RemoveDirectoryA
MoveFileA
SetFileAttributesW
RemoveDirectoryW
MoveFileW
CreateDirectoryA
CreateDirectoryW
DeleteFileA
DeleteFileW
GetShortPathNameA
lstrlenA
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryA
SetCurrentDirectoryW
SetCurrentDirectoryA
GetCurrentDirectoryW
SearchPathA
SearchPathW
GetTempPathA
GetTempPathW
GetTempFileNameA
GetTempFileNameW
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstChangeNotificationW
GetLogicalDriveStringsA
GetLogicalDriveStringsW
CreateFileA
GetFileSize
SetFilePointer
GetFileInformationByHandle
ReadFile
WriteFile
SetEndOfFile
CompareFileTime
GetStdHandle
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
Sleep
VirtualAlloc
VirtualFree
GetVersionExA
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
CreateProcessA
ExpandEnvironmentStringsW
GetModuleHandleA
GetStartupInfoA
user32
KillTimer
MessageBoxW
GetDlgItem
EndDialog
DestroyWindow
SendMessageA
SetTimer
LoadIconA
GetWindowTextW
GetWindowTextLengthW
GetWindowTextA
GetWindowTextLengthA
SetWindowTextW
SetWindowTextA
CreateWindowExA
CreateWindowExW
RegisterClassW
RegisterClassA
LoadStringW
LoadStringA
CharPrevA
CharNextA
DialogBoxParamW
CreateDialogParamW
DialogBoxParamA
GetWindowLongA
SetWindowLongA
CreateDialogParamA
ShowWindow
MoveWindow
GetWindowRect
SystemParametersInfoA
GetDialogBaseUnits
CharToOemA
CharLowerW
CharLowerA
CharUpperW
PostMessageA
CharPrevExA
CharUpperA
oleaut32
VariantClear
SysAllocStringByteLen
SysAllocString
VariantCopy
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
realloc
strlen
free
malloc
memcpy
memmove
_purecall
memcmp
_CxxThrowException
__CxxFrameHandler
_controlfp
Sections
.text Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ