Static task
static1
Behavioral task
behavioral1
Sample
8f838c0970a9a0de8a8751107fa095637771778c69dd87656b0400e97702ad10.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8f838c0970a9a0de8a8751107fa095637771778c69dd87656b0400e97702ad10.exe
Resource
win10v2004-20240611-en
General
-
Target
8f838c0970a9a0de8a8751107fa095637771778c69dd87656b0400e97702ad10
-
Size
156KB
-
MD5
1ebafcdcd4d2679cb23d183aa37e6b10
-
SHA1
9944eac2f922cbdb7f25e5ec00db174e0cb83f3e
-
SHA256
8f838c0970a9a0de8a8751107fa095637771778c69dd87656b0400e97702ad10
-
SHA512
d961569df23e1534957791e4d8e7cb6df5605c208047dbd047fd316ec4c315cbb2ab0902493ce726c16989c89e84dd3c12c63b922329231a255ec5112d34c231
-
SSDEEP
3072:sSc67ISSudtVWHSSbhqUu7uTubIwjo8yfyCAtAYuqdTB4249R:N7IS9VWH5hqUu7WkIg4BKX4n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f838c0970a9a0de8a8751107fa095637771778c69dd87656b0400e97702ad10
Files
-
8f838c0970a9a0de8a8751107fa095637771778c69dd87656b0400e97702ad10.exe windows:4 windows x86 arch:x86
af28ce16258dab178324149991ee2fcf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetUnhandledExceptionFilter
lstrcmpiA
GetCommandLineA
InterlockedIncrement
lstrlenA
GlobalUnlock
GlobalLock
GlobalAlloc
FlushInstructionCache
GetProcessHeap
LoadLibraryA
LocalFree
GetStartupInfoA
GetModuleHandleA
GetLocalTime
CreateFileA
GetCurrentThreadId
CreateThread
WaitForSingleObject
GetProcAddress
GetLastError
GetModuleFileNameA
VirtualQuery
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
InterlockedDecrement
HeapFree
SetEvent
lstrlenW
GetDiskFreeSpaceExA
WideCharToMultiByte
MultiByteToWideChar
CreateEventA
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcessId
OpenProcess
GetExitCodeProcess
OutputDebugStringA
GetCurrentProcess
TerminateProcess
HeapAlloc
user32
PostMessageA
SetWindowLongA
GetWindowThreadProcessId
GetParent
DefWindowProcA
GetWindowLongA
CallWindowProcA
CreateWindowExA
ShowWindow
SetFocus
BeginPaint
GetClientRect
EndPaint
InvalidateRect
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
SetWindowPos
UnionRect
PtInRect
IsWindow
GetKeyState
GetFocus
IsChild
GetMessageA
DispatchMessageA
wsprintfA
CharNextA
PostThreadMessageA
MessageBoxA
DestroyWindow
gdi32
SetTextAlign
Rectangle
CreateRectRgnIndirect
RestoreDC
DeleteDC
SetViewportOrgEx
SetWindowOrgEx
SetMapMode
SaveDC
LPtoDP
GetDeviceCaps
DeleteMetaFile
CloseMetaFile
SetWindowExtEx
CreateMetaFileA
TextOutA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
shell32
SHGetPathFromIDListA
ShellExecuteA
SHGetMalloc
SHBrowseForFolderA
ole32
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CreateOleAdviseHolder
CreateDataAdviseHolder
CoTaskMemAlloc
CoInitialize
CoUninitialize
CoTaskMemFree
oleaut32
VariantChangeType
GetErrorInfo
SetErrorInfo
CreateErrorInfo
SysFreeString
VariantInit
OleCreatePropertyFrame
VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysAllocStringLen
videowindow
ReleaseVideoWindow
CreateVideoWindow
surveillance
ReleaseTransImp
GetTransModuleImp
atl
ord44
ord51
ord50
ord46
ord27
ord26
ord31
ord30
ord58
ord32
ord20
ord17
ord57
ord18
ord21
ord16
ord23
ord43
msvcp60
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
msvcrt
memset
__CxxFrameHandler
strncpy
strstr
??1type_info@@UAE@XZ
malloc
strlen
sprintf
abs
??2@YAPAXI@Z
_ftol
memcpy
_snprintf
_access
strcmp
strcpy
_mbsrchr
_purecall
memcmp
realloc
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
wcslen
_CxxThrowException
free
winmm
timeSetEvent
timeKillEvent
timeBeginPeriod
shlwapi
PathAddBackslashA
PathAppendA
PathRemoveFileSpecA
Sections
.text Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 391KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ