Static task
static1
Behavioral task
behavioral1
Sample
8dc8867273f93678845ec8dfdfd84af24ab606121c3c076a0f6c5228e5cea862.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8dc8867273f93678845ec8dfdfd84af24ab606121c3c076a0f6c5228e5cea862.exe
Resource
win10v2004-20240802-en
General
-
Target
8dc8867273f93678845ec8dfdfd84af24ab606121c3c076a0f6c5228e5cea862
-
Size
11.1MB
-
MD5
4981608f030982bea9c2c6defab80a5d
-
SHA1
b15cf8423eb62e29812a81066adecfe31e5be743
-
SHA256
8dc8867273f93678845ec8dfdfd84af24ab606121c3c076a0f6c5228e5cea862
-
SHA512
fffab8d7a2cd3f3f99db5b5093ad80dbc6013aabe7a8be488c8e3bccf01562b48cb760d29066790e8b577f21cbc033a0602936b92c758d154cc5b9a11abf2d65
-
SSDEEP
6144:uBGnXixYRgmR8Ltknr2iW18eHxaVjSB1zVJJSB:8GnXixpo8xjaVjSB1zVJJw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8dc8867273f93678845ec8dfdfd84af24ab606121c3c076a0f6c5228e5cea862
Files
-
8dc8867273f93678845ec8dfdfd84af24ab606121c3c076a0f6c5228e5cea862.exe windows:5 windows x64 arch:x64
e0a1c05e20331a463d1ce2a92eb015fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
rpcrt4
UuidFromStringW
kernel32
CreateThread
FreeLibrary
GetProcAddress
GetModuleHandleW
lstrcmpiW
RaiseException
GetLastError
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
DeleteCriticalSection
InitializeCriticalSection
GetCommandLineW
CreateEventW
Sleep
WideCharToMultiByte
SetLastError
GetSystemDirectoryW
GetSystemWow64DirectoryW
LoadLibraryW
LocalAlloc
LocalFree
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
WaitForSingleObject
SetEvent
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
lstrlenW
GetCurrentThreadId
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
HeapSetInformation
HeapCreate
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
VirtualAlloc
user32
CharNextW
CharUpperBuffW
GetMessageW
DispatchMessageW
PostThreadMessageW
advapi32
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegConnectRegistryW
shell32
SHGetSpecialFolderPathW
ole32
CoTaskMemFree
StringFromGUID2
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitialize
GetRunningObjectTable
CreateItemMoniker
CoUninitialize
Sections
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10.8MB - Virtual size: 10.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ