Static task
static1
Behavioral task
behavioral1
Sample
8b9e77ae7db1f91db7d068fb911bf6af1baf6394458e33611e47193d01d5fb8a.exe
Resource
win7-20240508-en
General
-
Target
8b9e77ae7db1f91db7d068fb911bf6af1baf6394458e33611e47193d01d5fb8a
-
Size
366KB
-
MD5
46454384dff4a76b25d8e530f8590dfe
-
SHA1
718ad9a65dc665d5c572c1927b0c8156e23250ee
-
SHA256
8b9e77ae7db1f91db7d068fb911bf6af1baf6394458e33611e47193d01d5fb8a
-
SHA512
7f6eb8cfdbaa80fc11fdb011e520e8935bb777692fa6066c47872917fcc22079261a3a127db4278f917ca946a0716facbeaacbae148f64cb42f88f330cd53516
-
SSDEEP
6144:3L6uDUgFaEKk7si5Kp4ckdIsEzDqzGsXL:3uuDTykYalJdIsvSK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b9e77ae7db1f91db7d068fb911bf6af1baf6394458e33611e47193d01d5fb8a
Files
-
8b9e77ae7db1f91db7d068fb911bf6af1baf6394458e33611e47193d01d5fb8a.exe windows:5 windows x86 arch:x86
17e8d2b0134b469514e9fa0e4a178532
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
GetTimeFormatA
GetModuleHandleW
FormatMessageW
GetConsoleAliasW
GetFileAttributesW
GetModuleFileNameW
CompareStringW
SetConsoleTitleA
WritePrivateProfileStringW
GetStringTypeExA
GetConsoleOutputCP
GetConsoleAliasesW
WriteConsoleOutputW
GetProcAddress
FindVolumeMountPointClose
LoadLibraryA
ConvertDefaultLocale
EnumDateFormatsA
QueryMemoryResourceNotification
GetProcessAffinityMask
FreeEnvironmentStringsW
BuildCommDCBA
DeleteCriticalSection
GetShortPathNameW
DeleteAtom
LocalFileTimeToFileTime
SetLastError
GetComputerNameA
MultiByteToWideChar
HeapAlloc
Sleep
ExitProcess
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
GetLastError
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RtlUnwind
HeapSize
SetStdHandle
WriteConsoleA
WriteConsoleW
FlushFileBuffers
ReadFile
CreateFileA
CloseHandle
GetModuleHandleA
advapi32
DuplicateToken
winhttp
WinHttpReadData
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 23.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ