Static task
static1
Behavioral task
behavioral1
Sample
a8e524e249f38cee0bab92dcd051ee0adb1315fe61c2d0bde91214afa02d8556.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a8e524e249f38cee0bab92dcd051ee0adb1315fe61c2d0bde91214afa02d8556.exe
Resource
win10v2004-20240611-en
General
-
Target
a8e524e249f38cee0bab92dcd051ee0adb1315fe61c2d0bde91214afa02d8556
-
Size
110KB
-
MD5
2368e03db5f2ffe19cac0a86fa064ef9
-
SHA1
b375659a650980cb2a0cb8038070b460f72554cd
-
SHA256
a8e524e249f38cee0bab92dcd051ee0adb1315fe61c2d0bde91214afa02d8556
-
SHA512
0917098b67590a955e87ed1f0d4da1c7a15a07675cf70c3a4d5ae77900a0f13e0a00defdc6ee8969b98109e30a9019e8bc3cc4b486559956a713947ec073661b
-
SSDEEP
3072:KZfPxj+f2r+LJrXDoQQbJtn500ZOb7Ji3JnR00XStJVu/Z:Wfa2r+p1Ktqj7Ji3JnhitJV6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8e524e249f38cee0bab92dcd051ee0adb1315fe61c2d0bde91214afa02d8556
Files
-
a8e524e249f38cee0bab92dcd051ee0adb1315fe61c2d0bde91214afa02d8556.exe windows:4 windows x86 arch:x86
495e457cbdddf5d61be997e427dbbbe3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileTime
CreateDirectoryA
CloseHandle
SetFileAttributesA
GetFileAttributesA
GetLastError
SetVolumeLabelA
VirtualFree
VirtualAlloc
GetFullPathNameA
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
GetDiskFreeSpaceA
GetSystemInfo
GetFileSize
GetDriveTypeA
FindFirstFileA
FindNextFileA
CreateFileA
GetVolumeInformationA
WaitForSingleObject
Sleep
CreateProcessA
OpenFile
WinExec
_lclose
GetTempPathA
DeleteFileA
SetCurrentDirectoryA
RemoveDirectoryA
ReadFile
_llseek
GetVersionExA
GetTimeZoneInformation
_lread
_lwrite
LoadLibraryA
SetFilePointer
SetStdHandle
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
GetStdHandle
GetFileType
SetHandleCount
WriteFile
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
LCMapStringW
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
GetProcAddress
GetVersion
FindClose
HeapCreate
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetLocalTime
FileTimeToLocalFileTime
FileTimeToSystemTime
ExitProcess
HeapAlloc
HeapReAlloc
GetCurrentDirectoryA
HeapFree
user32
GetWindowLongA
DefWindowProcA
MoveWindow
CreateWindowExA
SetFocus
LoadIconA
KillTimer
SetWindowLongA
SetTimer
DdeInitializeA
PostMessageA
UnregisterClassA
RegisterClassA
LoadCursorA
SetWindowWord
GetParent
GetWindowWord
PeekMessageA
DestroyIcon
DestroyCursor
LoadBitmapA
DdeCreateStringHandleA
BeginPaint
GetClientRect
DdeConnect
GetDC
SendMessageA
SetCursor
DdeCreateDataHandle
DdeClientTransaction
DdeGetLastError
DdeFreeStringHandle
DdeDisconnect
DdeUninitialize
EnumWindows
SetWindowPos
SetWindowTextA
SetActiveWindow
EnableWindow
ShowWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
EnableMenuItem
GetDlgItem
GetDlgCtrlID
GetClassInfoA
MessageBeep
InvalidateRect
UpdateWindow
CallWindowProcA
GetWindowRect
ScreenToClient
FrameRect
ReleaseDC
AdjustWindowRectEx
DrawFocusRect
GetSysColor
FillRect
OemToCharA
wsprintfA
MessageBoxA
EndPaint
GetWindowTextA
DestroyWindow
GetDesktopWindow
gdi32
GetTextExtentPoint32A
SetBkColor
SetTextColor
SetBkMode
TextOutA
DeleteDC
BitBlt
CreateCompatibleDC
DeleteObject
CreateSolidBrush
LineTo
MoveToEx
CreatePen
GetStockObject
GetTextMetricsA
CreateFontIndirectA
EnumFontFamiliesA
SelectObject
shell32
FindExecutableA
SHBrowseForFolder
SHGetPathFromIDList
ShellExecuteA
ole32
CoTaskMemFree
mpr
WNetGetConnectionA
advapi32
RegQueryValueA
RegSetValueA
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 169B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ