Static task
static1
Behavioral task
behavioral1
Sample
c8f4909ea0928c1c07668c60dbfd3436.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c8f4909ea0928c1c07668c60dbfd3436.exe
Resource
win10v2004-20240226-en
General
-
Target
c8f4909ea0928c1c07668c60dbfd3436
-
Size
516KB
-
MD5
c8f4909ea0928c1c07668c60dbfd3436
-
SHA1
5fba09c12aca8ecd4a9337363a73605e10463b1f
-
SHA256
e5bcf70850aa43d0fc8ca3e149433ef7cf0f1d1e8f5dda0da075a45349883cfe
-
SHA512
9f0e366d753989776e76853aa1cb6abe5b4d472ff8e490b9113f17ab994703afc252a60c0f7999ac08e1d5c56244546d24c19663824472358cdb9cb70bce486e
-
SSDEEP
12288:Ia3R5JXkfhAJBqmfb3skoV0a3El+Ur3ZKYQMJSfEIxuq7:IaNkfGbqmjHoV06El+UVQMUT0q7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8f4909ea0928c1c07668c60dbfd3436
Files
-
c8f4909ea0928c1c07668c60dbfd3436.exe windows:4 windows x86 arch:x86
6acd579e8fcb8d879fa140feccf5a1bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetDataFromIDListW
SHFormatDrive
ExtractAssociatedIconExA
SHAppBarMessage
SHChangeNotify
gdi32
SetROP2
GetClipRgn
GetNearestColor
RealizePalette
ResetDCW
SetColorSpace
GetTextFaceA
SetDeviceGammaRamp
CreateDIBPatternBrush
OffsetClipRgn
GetStockObject
OffsetRgn
AngleArc
CombineTransform
ArcTo
SetBitmapDimensionEx
SetMapperFlags
EnumFontsA
SetArcDirection
SetBitmapBits
user32
IsZoomed
ShowWindow
GetDlgItemInt
GetClipboardSequenceNumber
IsChild
RegisterClassA
DlgDirListComboBoxW
DefWindowProcA
GetMenuItemInfoA
ChangeDisplaySettingsExA
CreateWindowExW
WinHelpW
DialogBoxParamA
GetCursor
GetNextDlgGroupItem
RegisterClassExA
DestroyWindow
InsertMenuItemW
VkKeyScanExW
SetRect
DlgDirListComboBoxA
MessageBoxA
TranslateAcceleratorW
UnregisterClassA
UnpackDDElParam
CallWindowProcW
DlgDirListA
kernel32
SetLastError
GetTimeFormatA
FlushFileBuffers
GetLocaleInfoW
TlsFree
GetLastError
GetCurrentThread
GetVersionExA
GetConsoleCP
VirtualAlloc
IsValidLocale
InterlockedExchange
GetCurrentProcess
VirtualQuery
GetSystemTime
CompareStringA
GetCommandLineA
EnumSystemLocalesA
IsValidCodePage
GetProcessHeap
FreeEnvironmentStringsA
HeapSize
SetStdHandle
LCMapStringW
IsDebuggerPresent
GetConsoleMode
HeapReAlloc
GetModuleFileNameA
SetHandleCount
QueryPerformanceCounter
GetCurrentThreadId
CloseHandle
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
WriteConsoleW
HeapCreate
CompareStringW
VirtualFree
MultiByteToWideChar
GetStringTypeW
HeapAlloc
DeleteCriticalSection
GetTickCount
ReadFile
WriteFile
TlsAlloc
GetTimeZoneInformation
GetEnvironmentStrings
CreateMutexA
Sleep
GetConsoleOutputCP
RtlUnwind
InitializeCriticalSection
ExitProcess
GetProcAddress
GetStartupInfoA
InterlockedDecrement
FreeLibrary
HeapFree
GetOEMCP
lstrlenA
UnhandledExceptionFilter
HeapDestroy
TlsSetValue
WideCharToMultiByte
CreateFileA
GetFileType
TerminateProcess
OpenMutexA
GetCPInfo
LeaveCriticalSection
InterlockedIncrement
FreeEnvironmentStringsW
WriteConsoleA
LoadLibraryA
GetDateFormatA
SetFilePointer
GetStdHandle
TlsGetValue
GetCurrentProcessId
GetLocaleInfoA
GetACP
GetModuleHandleA
EnterCriticalSection
SetConsoleCtrlHandler
GetStringTypeA
GetEnvironmentStringsW
LCMapStringA
GetUserDefaultLCID
SetEnvironmentVariableA
comctl32
ImageList_GetIcon
ImageList_BeginDrag
ImageList_ReplaceIcon
InitCommonControlsEx
ImageList_DragMove
CreateToolbarEx
ImageList_SetOverlayImage
Sections
.text Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ