Static task
static1
Behavioral task
behavioral1
Sample
08f44a4d709f1a16a1a99598e6038960.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
08f44a4d709f1a16a1a99598e6038960.exe
Resource
win10v2004-20240802-en
General
-
Target
08f44a4d709f1a16a1a99598e6038960.bin
-
Size
176KB
-
MD5
08f44a4d709f1a16a1a99598e6038960
-
SHA1
e682a268c7807fa3d4a5c7b0244a2f44663aadfc
-
SHA256
160c95261abba3e71c52195251db075ed922acdf010aa85fef1760e8fa198bd8
-
SHA512
f720b03ff925fc04f1cc55cf00754a362f1029e5618705f0cb18f9f710ef4aed4d711deecd34647888c8c9771217c66046fde48eeda34b06a9791969fcb43355
-
SSDEEP
3072:cpXEUPYSRha0CW+ttErm8TL/FGVlI7eGCENNZ7d3yaN:nUQ4aCGtErxTL/8G3CENX7d3D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08f44a4d709f1a16a1a99598e6038960.bin
Files
-
08f44a4d709f1a16a1a99598e6038960.bin.exe windows:3 windows x86 arch:x86
2e6cd86a698c663d1430da296cb60ccb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
isalnum
user32
SetWindowLongW
kernel32
LoadLibraryA
GetLastError
InterlockedExchange
RegisterWaitForSingleObject
VirtualQuery
SetUnhandledExceptionFilter
FreeConsole
GetComputerNameA
RaiseException
LocalAlloc
GetProcAddress
FreeLibrary
Sections
.texT Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
K{8XC Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt1 Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
+T}HE Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 252B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ