Static task
static1
Behavioral task
behavioral1
Sample
8e8df5163854505f60ade3b67cc5739823e3c5f948d4e042574e91689aad3c10.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8e8df5163854505f60ade3b67cc5739823e3c5f948d4e042574e91689aad3c10.exe
Resource
win10v2004-20240508-en
General
-
Target
8e8df5163854505f60ade3b67cc5739823e3c5f948d4e042574e91689aad3c10
-
Size
6.3MB
-
MD5
317fb5b216f3fe5ae4fa73667984eaf1
-
SHA1
b9254c70adf6f8cd5be57c4ef1e299c6592e2d78
-
SHA256
8e8df5163854505f60ade3b67cc5739823e3c5f948d4e042574e91689aad3c10
-
SHA512
36537c8d30432b10da8ac7b64bccbfa21c42860d1aac72f795b4d5dc83db9899a03bb603101ea7db381ea3327c4531bead56279592f09a4fac81e6448b8ef7db
-
SSDEEP
196608:OpoSj8peko2IUxn09Svcq3yWPjQIjbteOejKNqHGyIo:OYp3o2BioEqCWPjrjbteOejKNqmO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e8df5163854505f60ade3b67cc5739823e3c5f948d4e042574e91689aad3c10
Files
-
8e8df5163854505f60ade3b67cc5739823e3c5f948d4e042574e91689aad3c10.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 5.2MB - Virtual size: 23.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aowxmqds Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
asxsrsfg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE