Static task
static1
Behavioral task
behavioral1
Sample
8ff9b83e978623910d58aa1b3ca1a25a91ae94d726cceb068bbfe107d7893d92.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8ff9b83e978623910d58aa1b3ca1a25a91ae94d726cceb068bbfe107d7893d92.exe
Resource
win10v2004-20240412-en
General
-
Target
8ff9b83e978623910d58aa1b3ca1a25a91ae94d726cceb068bbfe107d7893d92
-
Size
532KB
-
MD5
f2d0cace863286f0ccc1d65d9076eef7
-
SHA1
6a3457bcd251c19960f0498a656b421b74900d67
-
SHA256
8ff9b83e978623910d58aa1b3ca1a25a91ae94d726cceb068bbfe107d7893d92
-
SHA512
ebd452b23247ebaa0946ccb6d4f093f86a4143cef58d891369013901c4318a455a9841bb5e1ae5c63c90c347f709863eb495b364d06feda2ae4629b098e1d835
-
SSDEEP
12288:WDA+lb4NfOM0YQ7MSW2p7x8YZMt5kWH+iS0B/l32P9tBVZHl3lCeTDDSn:WDA+14NfOM0YQ7MSfxQbHnv349tB3l3M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ff9b83e978623910d58aa1b3ca1a25a91ae94d726cceb068bbfe107d7893d92
Files
-
8ff9b83e978623910d58aa1b3ca1a25a91ae94d726cceb068bbfe107d7893d92.exe windows:4 windows x86 arch:x86
69c6fdc1a1a8744b5d3c9df499d6d4f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
winmm
joyGetNumDevs
mciSendCommandA
joyGetDevCapsA
joyGetPosEx
waveOutClose
waveOutReset
waveOutPrepareHeader
waveOutOpen
waveOutWrite
waveOutUnprepareHeader
wsock32
htons
htonl
ntohs
bind
ioctlsocket
WSASetBlockingHook
WSAUnhookBlockingHook
ntohl
WSACancelBlockingCall
inet_addr
opengl32
glColor3ubv
wglCreateContext
wglGetCurrentContext
wglGetCurrentDC
wglMakeCurrent
wglDeleteContext
glClearColor
glAlphaFunc
glPolygonMode
glGetString
wglGetProcAddress
glTexSubImage2D
glFinish
glFogi
glFogfv
glFogf
glLoadMatrixf
glClear
glDepthFunc
glClearStencil
glCullFace
glGetFloatv
glFrustum
glColor4fv
glDepthRange
glScalef
glHint
glPushMatrix
glPopMatrix
glStencilFunc
glStencilOp
glVertex3f
glTexEnvi
glTranslatef
glRotatef
glDepthMask
glShadeModel
glBlendFunc
glVertex3fv
glTexEnvf
glGetIntegerv
glViewport
glMatrixMode
glLoadIdentity
glOrtho
glDrawBuffer
glTexImage2D
glColor3f
glDisable
glEnable
glColor4f
glBegin
glTexCoord2f
glVertex2f
glEnd
glTexParameterf
glReadPixels
glu32
gluBuild2DMipmaps
kernel32
GlobalFree
GetVersionExA
QueryPerformanceFrequency
GetModuleFileNameA
DeleteFileA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
SetStdHandle
CreateFileA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
LCMapStringW
GetProcAddress
ExitProcess
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
GetLastError
CreateDirectoryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
FlushFileBuffers
ReadFile
SetHandleCount
GetFileType
SetFilePointer
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
WideCharToMultiByte
LCMapStringA
GlobalMemoryStatus
GetCurrentDirectoryA
AllocConsole
GetNumberOfConsoleInputEvents
ReadConsoleInputA
QueryPerformanceCounter
FreeConsole
WriteFile
FreeEnvironmentStringsA
RtlUnwind
VirtualProtect
GlobalAlloc
GlobalLock
GlobalUnlock
UnhandledExceptionFilter
Sleep
GetLargestConsoleWindowSize
SetConsoleWindowInfo
SetConsoleScreenBufferSize
WriteConsoleInputA
ReadConsoleOutputCharacterA
GetConsoleScreenBufferInfo
UnmapViewOfFile
MapViewOfFile
WaitForMultipleObjects
SetEvent
CloseHandle
RaiseException
CreateEventA
GetStdHandle
LoadLibraryA
CreateThread
user32
RegisterClassA
ReleaseCapture
RegisterWindowMessageA
GetCursorPos
GetMessageA
MsgWaitForMultipleObjects
GetWindowRect
CreateDialogParamA
MessageBoxA
SetForegroundWindow
DefWindowProcA
SetRect
SetWindowPos
GetSystemMetrics
SetCursorPos
SetCapture
ShowCursor
ClipCursor
LoadIconA
EnumDisplaySettingsA
LoadCursorA
SystemParametersInfoA
DestroyWindow
PostQuitMessage
SendMessageA
AdjustWindowRectEx
ChangeDisplaySettingsA
PeekMessageA
TranslateMessage
DispatchMessageA
GetDC
ReleaseDC
CreateWindowExA
ShowWindow
UpdateWindow
gdi32
GetDeviceCaps
ChoosePixelFormat
SetPixelFormat
SwapBuffers
PatBlt
Sections
.text Size: 376KB - Virtual size: 374KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 7.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ