Static task
static1
Behavioral task
behavioral1
Sample
8a3712d593a07fb1a9ed5c59c870278a080bf4d2972115a629950c67f04db6de.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8a3712d593a07fb1a9ed5c59c870278a080bf4d2972115a629950c67f04db6de.exe
Resource
win10v2004-20240426-en
General
-
Target
8a3712d593a07fb1a9ed5c59c870278a080bf4d2972115a629950c67f04db6de
-
Size
40KB
-
MD5
384714e36aa25262647c872c4250e7a1
-
SHA1
4fb1bcab7d5efede2f1a4b6bd4cc27456e267253
-
SHA256
8a3712d593a07fb1a9ed5c59c870278a080bf4d2972115a629950c67f04db6de
-
SHA512
7310e266f9d5e2e31c40b55c10bdde8c18bcfe8d59be7d03cc3bf17b505688bb98eeb691247c4644df7724563e534235bee9a8ddef094a106eeba7937819b187
-
SSDEEP
384:nA+XzzEgRRjcgEpjLZTEJg7z/0K/MoZ2liU47+G1WbsIanzWc0JWD:nJHEgrjcp/EgrgwfL4sNn2g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a3712d593a07fb1a9ed5c59c870278a080bf4d2972115a629950c67f04db6de
Files
-
8a3712d593a07fb1a9ed5c59c870278a080bf4d2972115a629950c67f04db6de.exe windows:4 windows x86 arch:x86
cca519a52d58b32ef18954290d653b70
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msohev
ord6
ord5
ord7
ord3
ord2
ord8
ord4
user32
DdeCreateStringHandleW
DdeCreateStringHandleA
DdeClientTransaction
kernel32
GetVersionExW
GlobalAlloc
GetLastError
WideCharToMultiByte
CreateProcessA
CreateProcessW
GetCommandLineW
GetACP
GlobalFree
ReleaseMutex
CreateMutexW
GetModuleFileNameA
GetModuleFileNameW
CloseHandle
GetProcAddress
LoadLibraryA
SetLastError
ExitProcess
CreateFileA
CreateFileW
MultiByteToWideChar
CreateMutexA
advapi32
RegSetValueExA
RegCreateKeyExW
RegCreateKeyExA
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
RegDeleteKeyA
RegEnumKeyExW
RegEnumKeyExA
RegEnumValueW
RegEnumValueA
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
RegSetValueExW
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ