Static task
static1
Behavioral task
behavioral1
Sample
8f2e6561238addc2165c3a34d83d0e20N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8f2e6561238addc2165c3a34d83d0e20N.exe
Resource
win10v2004-20240709-en
General
-
Target
8f2e6561238addc2165c3a34d83d0e20N.exe
-
Size
480KB
-
MD5
8f2e6561238addc2165c3a34d83d0e20
-
SHA1
5c40cc1a2bd2cacd14f6d1c58ee62eb4cdf94a3f
-
SHA256
9843dce464a7a3627f2de64e77f05656e9d8fc71c6e97802d1ded84638798ac6
-
SHA512
661c3e4861a16dfb1f4a76bc6727a6c9aa3b717e3161760178023aba23e7bfe05c3ccba3a6a8db775e916ab987cab354a3ffa3edfc79d9b130d4a4bb34dd2ccf
-
SSDEEP
6144:u3vsG74Kllhl7CiMm4FNz6PxIB2q4RBZ07boPathPk7yGwOUHpyIQN3Hj7furVOS:AsG7z7CiMlFYPxIBwnU7GUJIJHPWpg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f2e6561238addc2165c3a34d83d0e20N.exe
Files
-
8f2e6561238addc2165c3a34d83d0e20N.exe.exe windows:4 windows x86 arch:x86
a22b1cba86e1c19c5d4528035c6e6f7c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
GetConsoleCP
GetStdHandle
VirtualLock
RtlUnwind
GetCurrentThread
VirtualFreeEx
GetCurrentProcess
GetCPInfo
VirtualAlloc
GetTimeFormatA
WriteConsoleW
HeapReAlloc
FreeEnvironmentStringsA
MapViewOfFile
FlushFileBuffers
GlobalGetAtomNameW
RaiseException
GetModuleFileNameA
CompareStringA
SetHandleCount
OutputDebugStringW
DebugBreak
GetConsoleMode
MultiByteToWideChar
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
GetCommandLineA
DeleteCriticalSection
GetLocaleInfoW
QueryPerformanceCounter
IsBadReadPtr
VirtualFree
SetConsoleCtrlHandler
TlsAlloc
InterlockedDecrement
GetDiskFreeSpaceExW
HeapAlloc
FreeLibrary
HeapFree
LockFile
LeaveCriticalSection
GetCurrentProcessId
GetEnvironmentStrings
GetDateFormatA
LoadLibraryW
HeapValidate
GetLocaleInfoA
UnhandledExceptionFilter
EnterCriticalSection
GetEnvironmentStringsW
CloseHandle
WriteFile
SetStdHandle
SetConsoleActiveScreenBuffer
SetEnvironmentVariableW
LCMapStringW
LCMapStringA
IsValidCodePage
FindResourceA
SetConsoleScreenBufferSize
SetUnhandledExceptionFilter
OutputDebugStringA
ReadFileEx
CopyFileA
GetLastError
GetProcAddress
EnumSystemLocalesA
FreeEnvironmentStringsW
GetMailslotInfo
lstrlenA
InterlockedExchange
SetEnvironmentVariableA
IsDebuggerPresent
GetACP
VirtualQuery
InterlockedIncrement
InitializeCriticalSection
FlushViewOfFile
GetStringTypeA
GetCurrentThreadId
WriteConsoleA
CreateFileW
TerminateProcess
CreateFileA
GetProcessHeap
LocalHandle
SetFilePointer
GetTimeZoneInformation
GetCommandLineW
GetFileType
GetPrivateProfileSectionA
ExitProcess
GetStringTypeW
SetLastError
TlsGetValue
GetModuleHandleA
GetConsoleOutputCP
GetCompressedFileSizeA
HeapDestroy
GetUserDefaultLCID
GetVersionExA
GetStartupInfoA
GetModuleFileNameW
WideCharToMultiByte
FindFirstFileA
HeapCreate
TlsFree
GetOEMCP
TlsSetValue
IsValidLocale
GetStartupInfoW
user32
SetClassLongA
GetUserObjectInformationA
SetActiveWindow
ModifyMenuA
SetWindowPos
OpenDesktopW
FindWindowW
GetProcessWindowStation
CharUpperBuffA
InvalidateRgn
SetUserObjectInformationW
SetWindowsHookExW
CreateIconIndirect
CharToOemBuffW
SetCapture
CallMsgFilter
DragObject
IsDialogMessageA
GetMenuItemID
PtInRect
comdlg32
ChooseColorA
FindTextA
GetFileTitleW
PrintDlgA
PageSetupDlgW
LoadAlterBitmap
ChooseFontA
ChooseColorW
ReplaceTextA
Sections
.text Size: 299KB - Virtual size: 298KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ