Static task
static1
Behavioral task
behavioral1
Sample
c8a0cdca24330fc16f6d9fe2bd815639.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c8a0cdca24330fc16f6d9fe2bd815639.exe
Resource
win10v2004-20240226-en
General
-
Target
c8a0cdca24330fc16f6d9fe2bd815639
-
Size
716KB
-
MD5
c8a0cdca24330fc16f6d9fe2bd815639
-
SHA1
af9cbddad3524a8be405427347932d1ae19f02fb
-
SHA256
f85b442a6df5eed645a3de8f69d3e4aba2934363aa7e56d9b6cf4fafc49492a5
-
SHA512
5e386b800b60e38dd37793893cea2b6df082454c1f8bc6d225811ac6c4fed3497de1661c652f64b5e446ddae6939837200de647ab5a6bdb383ce31893176d5db
-
SSDEEP
12288:3Oea+MbZQknFU0GLzhAli0g6+TNm6ovS+UCOjuILrAoVJAtOYr/P8Te+OkJmR9WV:3OUknF2n+AH6H/UCOj3r/ItpbPqe+9JJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8a0cdca24330fc16f6d9fe2bd815639
Files
-
c8a0cdca24330fc16f6d9fe2bd815639.exe windows:4 windows x86 arch:x86
ed1998db63195a6973eaec6c7d1beed7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
GetTickCount
GetAtomNameA
CompareFileTime
GetModuleHandleA
HeapWalk
GetConsoleCP
lstrlenA
GetProfileIntA
FindAtomA
GlobalUnlock
LoadLibraryW
InterlockedExchange
TlsFree
GetACP
CloseHandle
HeapReAlloc
VirtualProtect
ResetEvent
GetVersion
WaitForSingleObject
user32
ScrollDC
EnableScrollBar
TranslateMessage
GetKeyboardLayout
GetScrollRange
GetWindowLongA
DialogBoxParamA
PostMessageA
EqualRect
GetSubMenu
GetMenuStringA
SetWindowPos
GetDlgItem
InsertMenuA
UpdateWindow
GetMenu
ShowWindow
InflateRect
DestroyMenu
GetParent
CopyRect
GetWindowTextA
DispatchMessageA
ModifyMenuA
LoadIconA
MessageBoxA
SetPropA
SetSysColors
PostQuitMessage
userenv
GetProfileType
FreeGPOListA
RefreshPolicy
GetGPOListA
LoadUserProfileA
apphelp
ApphelpCheckExe
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ