Static task
static1
Behavioral task
behavioral1
Sample
8e1ce8ce3f77830b51e6515e2b084bb8d5b031f62a002e1526880592c34778f0.exe
Resource
win10v2004-20240802-en
General
-
Target
8e1ce8ce3f77830b51e6515e2b084bb8d5b031f62a002e1526880592c34778f0
-
Size
405KB
-
MD5
010ca9af2d9e0822c2a294d0d8f7fe01
-
SHA1
f325038bf0b1671d4034f6990e9c85afa2f186d9
-
SHA256
8e1ce8ce3f77830b51e6515e2b084bb8d5b031f62a002e1526880592c34778f0
-
SHA512
f76f862ed43b6eec954c0649048edee89f56f79e7d7a96827c9556f7626538ed78366b7d4ea87e53ceb926d111e937580b38db66addeaddb1f880756b17b3c91
-
SSDEEP
3072:uiFHYQ+xht6Gm6K9/wjI2Cg4f7bPO/fo66pswcd980EW+8UO4RAKmXb:9HYQwhjOT7bO/f36e9xEWJUj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e1ce8ce3f77830b51e6515e2b084bb8d5b031f62a002e1526880592c34778f0
Files
-
8e1ce8ce3f77830b51e6515e2b084bb8d5b031f62a002e1526880592c34778f0.exe windows:5 windows x86 arch:x86
7457d4703b7d8583e77eefbde9a76566
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasExesLengthA
GetCurrentProcess
SetDefaultCommConfigW
SetEnvironmentVariableW
CreateJobObjectW
QueryDosDeviceA
InterlockedCompareExchange
UnlockFile
OpenSemaphoreA
CreateHardLinkA
GetTickCount
GetNumberFormatA
GetConsoleAliasExesW
SetCommState
GlobalAlloc
LoadLibraryW
LocalShrink
_hread
GetCalendarInfoA
CreateEventA
SetVolumeMountPointA
GetSystemWindowsDirectoryA
SetConsoleCP
GetFileAttributesA
VerifyVersionInfoA
CreateActCtxA
GetThreadPriorityBoost
GetShortPathNameA
GetLogicalDriveStringsA
SetEndOfFile
GetCurrentDirectoryW
SetLastError
GetProcAddress
PeekConsoleInputW
CreateNamedPipeA
GetProcessVersion
LoadLibraryA
InterlockedExchangeAdd
CreateFileMappingW
GetNumberFormatW
SetConsoleWindowInfo
GlobalWire
GetModuleFileNameA
EnumResourceNamesA
VirtualProtect
EnumDateFormatsW
SetProcessShutdownParameters
SetFileShortNameA
GetDiskFreeSpaceExA
ReadConsoleInputW
GetTempPathA
LCMapStringW
HeapReAlloc
HeapSize
GetLastError
CommConfigDialogA
MultiByteToWideChar
HeapFree
HeapAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetModuleHandleW
ExitProcess
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
RaiseException
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameW
IsProcessorFeaturePresent
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
LeaveCriticalSection
EnterCriticalSection
Sleep
WideCharToMultiByte
GetStringTypeW
user32
CharUpperW
GetSysColor
GetMenuStringA
GetCaretPos
LoadMenuW
gdi32
CreateDCW
Sections
.text Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 94KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ