Static task
static1
Behavioral task
behavioral1
Sample
8e33ddada183e32990da32a9ee6d89b40c7a29586adb0d0de5388c3634702ab3.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8e33ddada183e32990da32a9ee6d89b40c7a29586adb0d0de5388c3634702ab3.exe
Resource
win10v2004-20240802-en
General
-
Target
8e33ddada183e32990da32a9ee6d89b40c7a29586adb0d0de5388c3634702ab3.exe
-
Size
79KB
-
MD5
cc9e601f420ef5952e9579122a40bc0d
-
SHA1
ad5a23a03b456e3924d879d35a7f03a813c91243
-
SHA256
8e33ddada183e32990da32a9ee6d89b40c7a29586adb0d0de5388c3634702ab3
-
SHA512
418be1d301c1571df5cd63cd2a14ddbb9482807101dc4633b06b9b8916e11b6fb511deea12775dfaa6289b8711a20bc752bb78cd82b3ef8b06c57bef4ec3bfce
-
SSDEEP
1536:8iVCYTd/s/cG+5WMfuxpVfg+TyMd9XOUvOaEpDXeE/ZloxD:8Dy/s/cl5K9fHT5dQpjb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e33ddada183e32990da32a9ee6d89b40c7a29586adb0d0de5388c3634702ab3.exe
Files
-
8e33ddada183e32990da32a9ee6d89b40c7a29586adb0d0de5388c3634702ab3.exe.exe windows:4 windows x86 arch:x86
7d994e80dbebb6a58897a6ca5e1620f7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateConsoleScreenBuffer
CreateEventA
DisableThreadLibraryCalls
ExitProcess
GetACP
GetCommandLineA
GetDateFormatA
GetLastError
GetModuleHandleA
GetOEMCP
GetProcessWorkingSetSize
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersionExA
GlobalMemoryStatus
GlobalReAlloc
HeapAlloc
HeapCreate
HeapReAlloc
LCMapStringW
MapViewOfFile
MultiByteToWideChar
OutputDebugStringA
RtlUnwind
SetHandleCount
SetLastError
SetProcessWorkingSetSize
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
UnmapViewOfFile
WriteFile
lstrlenA
user32
SetDlgItemTextA
SendMessageA
RegisterWindowMessageA
LoadCursorA
IsIconic
GetWindowLongA
GetWindow
GetUserObjectSecurity
GetUpdateRgn
GetDC
FindWindowExA
FindWindowA
EmptyClipboard
CloseClipboard
BeginPaint
LoadMenuA
advapi32
RegQueryInfoKeyW
RegDeleteValueW
QueryServiceObjectSecurity
ObjectDeleteAuditAlarmA
MapGenericMask
LsaLookupPrivilegeValue
LsaEnumeratePrivileges
IsValidSecurityDescriptor
InitiateSystemShutdownExA
ElfRegisterEventSourceW
ConvertSecurityDescriptorToAccessNamedA
ChangeServiceConfig2A
BackupEventLogW
RegisterEventSourceA
olepro32
OleTranslateColor
OleLoadPicture
oleacc
ObjectFromLresult
AccessibleObjectFromEvent
GetRoleTextA
LresultFromObject
security
SealMessage
QueryContextAttributesA
comctl32
ImageList_SetIconSize
ImageList_SetFilter
ImageList_SetImageCount
ImageList_SetOverlayImage
ImageList_Write
InitCommonControls
InitCommonControlsEx
InitMUILanguage
InitializeFlatSB
LBItemFromPt
MakeDragList
MenuHelp
PropertySheetA
PropertySheetW
ShowHideMenuCtl
ImageList_SetFlags
UninitializeFlatSB
ImageList_SetDragCursorImage
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Replace
ImageList_Read
ImageList_Merge
ImageList_LoadImageW
ImageList_LoadImageA
ImageList_GetImageRect
ImageList_GetImageInfo
CreateMappedBitmap
CreatePropertySheetPageA
CreatePropertySheetPageW
CreateStatusWindowA
CreateStatusWindowW
CreateUpDownControl
DestroyPropertySheetPage
DrawInsert
DrawStatusTextA
DrawStatusTextW
FlatSB_EnableScrollBar
FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollProp
FlatSB_GetScrollRange
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
FlatSB_SetScrollProp
FlatSB_SetScrollRange
FlatSB_ShowScrollBar
GetEffectiveClientRect
GetMUILanguage
ImageList_Add
ImageList_AddIcon
ImageList_BeginDrag
ImageList_Copy
ImageList_Create
ImageList_Destroy
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_DrawIndirect
ImageList_Duplicate
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIcon
ImageList_GetIconSize
ImageList_GetImageCount
Sections
.text Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ