Static task
static1
Behavioral task
behavioral1
Sample
8b1cf094345c5608b0e40364b379baad41a728ba2b248a7f4ea1f9ddf2f2fbd5.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8b1cf094345c5608b0e40364b379baad41a728ba2b248a7f4ea1f9ddf2f2fbd5.exe
Resource
win10v2004-20240802-en
General
-
Target
8b1cf094345c5608b0e40364b379baad41a728ba2b248a7f4ea1f9ddf2f2fbd5
-
Size
194KB
-
MD5
4a59cb5781123fd94a7ca7f7817c197f
-
SHA1
fbf8fcaa2e20712a694ace0b0b577822d8cf93c8
-
SHA256
8b1cf094345c5608b0e40364b379baad41a728ba2b248a7f4ea1f9ddf2f2fbd5
-
SHA512
0e6a9e6cf90163a994e956bba08f8f271b3143d054c1373a12098168d5dbdc48558084c0fb0575c3c8eabe67ba99786d483702c28930b993eb3e3fb369d38b39
-
SSDEEP
3072:lsiZdkyF+86gkdkMC3nQK3RtANh2He50ffl4BIIDzw2:ljCT8SZ404He59
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b1cf094345c5608b0e40364b379baad41a728ba2b248a7f4ea1f9ddf2f2fbd5
Files
-
8b1cf094345c5608b0e40364b379baad41a728ba2b248a7f4ea1f9ddf2f2fbd5.exe windows:6 windows x86 arch:x86
3ea8421e8ad8e995df4af728734d25f9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultUILanguage
GetPrivateProfileStringW
lstrcpyW
GetModuleFileNameW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetPrivateProfileIntW
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WritePrivateProfileStringW
GetCurrentProcessId
CreateDirectoryW
user32
SendMessageW
ShowWindow
SetTimer
KillTimer
ModifyMenuW
InsertMenuItemW
CreatePopupMenu
TrackPopupMenu
PostQuitMessage
UpdateWindow
GetCursorPos
GetMessageW
DefWindowProcW
MessageBoxW
CreateWindowExW
DispatchMessageW
RegisterClassExW
TranslateMessage
LoadIconW
LoadCursorW
wsprintfW
BeginPaint
EndPaint
GetWindowTextW
SetWindowTextW
advapi32
RegCreateKeyExW
RegCloseKey
RegSetValueExW
shell32
SHGetFolderPathW
Shell_NotifyIconW
wtsapi32
WTSRegisterSessionNotification
msvcp140
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?fail@ios_base@std@@QBE_NXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??Bid@locale@std@@QAEIXZ
?_Xbad_function_call@std@@YAXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
vcruntime140
memcpy
_except_handler4_common
memset
__current_exception_context
__current_exception
_CxxThrowException
__std_exception_copy
__CxxFrameHandler3
__std_exception_destroy
memmove
api-ms-win-crt-stdio-l1-1-0
fputc
_get_stream_buffer_pointers
fclose
fread
fflush
fsetpos
ungetc
setvbuf
fgetpos
fwrite
_set_fmode
__p__commode
fgetc
_fseeki64
api-ms-win-crt-convert-l1-1-0
_wtoi
api-ms-win-crt-string-l1-1-0
wcscpy_s
wcscat_s
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-runtime-l1-1-0
_cexit
_seh_filter_exe
_set_app_type
_get_narrow_winmain_command_line
_initterm
_initterm_e
_crt_atexit
_exit
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_register_thread_local_exe_atexit_callback
_configure_narrow_argv
_c_exit
terminate
_controlfp_s
_register_onexit_function
exit
_initialize_onexit_table
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-heap-l1-1-0
_callnewh
free
_set_new_mode
malloc
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ