Static task
static1
Behavioral task
behavioral1
Sample
8d8572292b3fd893ee12b7b5284b4eae6daac99433e477745361f968fe52b348.exe
Resource
win7-20231129-en
General
-
Target
8d8572292b3fd893ee12b7b5284b4eae6daac99433e477745361f968fe52b348
-
Size
6.0MB
-
MD5
c34cb581ee2b6abc9e5295e4ced7a28e
-
SHA1
bffef3b6b3b523c0abd6a04ca018547753596337
-
SHA256
8d8572292b3fd893ee12b7b5284b4eae6daac99433e477745361f968fe52b348
-
SHA512
f15ac7af5e293603b2e4f9425e93b6699808bd653c8aae86c749bec3575233d948f1a9e7e02af96b028d1f7bc414e9f2993d5c2af80a06c4eccf6ba3921622ab
-
SSDEEP
98304:5c3o5nF2lZODQJ6wgsucxwlaCSBgUK9NWmrZZqwXkHPu2MySiMcjIFtVX5h8jFRN:00mucxbCr5NWmvqwXWPu2MCMDfVphaFX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d8572292b3fd893ee12b7b5284b4eae6daac99433e477745361f968fe52b348
Files
-
8d8572292b3fd893ee12b7b5284b4eae6daac99433e477745361f968fe52b348.exe windows:6 windows x86 arch:x86
e7ba9cf649be312a3cf12f22936d3f47
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
wsprintfA
GetProcessWindowStation
GetUserObjectInformationW
gdi32
CreateCompatibleBitmap
advapi32
CredEnumerateA
shell32
ShellExecuteA
ole32
CoInitializeEx
ws2_32
WSAStartup
crypt32
CryptUnprotectData
shlwapi
PathFindExtensionA
gdiplus
GdiplusStartup
setupapi
SetupDiEnumDeviceInterfaces
ntdll
RtlUnicodeStringToAnsiString
Sections
.text Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.*?|· Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.*?|· Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp£]_ Size: - Virtual size: 998KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp£]_ Size: 1024B - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp£]_ Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 223KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ