Static task
static1
Behavioral task
behavioral1
Sample
8f05b29284b0bf78da28f4591214941d29c7e3c06fc2cf88deec7303499d99df.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8f05b29284b0bf78da28f4591214941d29c7e3c06fc2cf88deec7303499d99df.exe
Resource
win10v2004-20240412-en
General
-
Target
8f05b29284b0bf78da28f4591214941d29c7e3c06fc2cf88deec7303499d99df
-
Size
900KB
-
MD5
b453df3dd59b3deb37751908cd8e677f
-
SHA1
645c922c5aa6e9eafdfb3b692962cedc0c567f5d
-
SHA256
8f05b29284b0bf78da28f4591214941d29c7e3c06fc2cf88deec7303499d99df
-
SHA512
e3ca834e05664323d0922d730599521eb5c3334e1775df7263ee1b6b19f3df1db0558f3c85c4b2541292b485f90578ffb160ef53a430439c1cb2e3be8bd8e58b
-
SSDEEP
24576:BIs/LMbqQ0r9BK3eeRAPbuTjBIxkul5AXMxABDsEC/:msDGtALeiwCFY4h/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f05b29284b0bf78da28f4591214941d29c7e3c06fc2cf88deec7303499d99df
Files
-
8f05b29284b0bf78da28f4591214941d29c7e3c06fc2cf88deec7303499d99df.exe windows:4 windows x86 arch:x86
3a8897c84eb41f36b4bbabcc617408b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
user32
GetWindow
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 104KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 784KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ