Static task
static1
Behavioral task
behavioral1
Sample
08df48c7b27ae461f4bbbaff9564a27fba41e78b9a95490d2ec5e2710ee3ba6f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
08df48c7b27ae461f4bbbaff9564a27fba41e78b9a95490d2ec5e2710ee3ba6f.exe
Resource
win10v2004-20240226-en
General
-
Target
08df48c7b27ae461f4bbbaff9564a27fba41e78b9a95490d2ec5e2710ee3ba6f
-
Size
187KB
-
MD5
d7da83d78f16457156e52bf889609339
-
SHA1
9ce649e963f9cc6abd33beb20d5c4807017892da
-
SHA256
08df48c7b27ae461f4bbbaff9564a27fba41e78b9a95490d2ec5e2710ee3ba6f
-
SHA512
a5075cca2a1094a978e2f22ba4916acab85bf3587c719d157e9bc8aaa14bb16ea1e25daff7de30cd01061b5d9b78a9a0abaa0816f473f7b1db007ebd76a23af1
-
SSDEEP
3072:8eRyGI27QponX2ce5jYyvCxUyAEWVBJO2FSIiWGlyzyiZfvTehtdLL/Ogj4:VB9MqGch9GEea3IiW1JqHZLzc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08df48c7b27ae461f4bbbaff9564a27fba41e78b9a95490d2ec5e2710ee3ba6f
Files
-
08df48c7b27ae461f4bbbaff9564a27fba41e78b9a95490d2ec5e2710ee3ba6f.exe windows:1 windows x86 arch:x86
2cafc5d578636b8e9cca4b44e0370bd0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mclmcrrt79
mclGetID_proxy
mclInitializeApplication_proxy
mclInitializeComponentInstanceWithEmbeddedCTF_proxy
mclMain_proxy
mclRunMain_proxy
mclSetCmdLineUserData_proxy
mclTerminateApplication_proxy
mclTerminateInstance_proxy
mclWaitForFiguresToDie_proxy
mclWrite_proxy
mclmcrInitialize_proxy
separatePathName_proxy
kernel32
ExitProcess
GetStartupInfoA
RtlUnwind
user32
MessageBoxA
msvcrt
__argv
__getmainargs
_cexit
_environ
_exit
_fdopen
_open_osfhandle
_setmode
exit
fclose
raise
setbuf
signal
sprintf
strlen
__argc
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88B - Virtual size: 88B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE