Static task
static1
Behavioral task
behavioral1
Sample
8d01d2236514c2ae1947aa69718809d7eea2c85d1ffd04840c8993648c2fb0ebN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8d01d2236514c2ae1947aa69718809d7eea2c85d1ffd04840c8993648c2fb0ebN.exe
Resource
win10v2004-20240802-en
General
-
Target
8d01d2236514c2ae1947aa69718809d7eea2c85d1ffd04840c8993648c2fb0ebN
-
Size
76KB
-
MD5
263d4d6fdf97d19b6b5740ddc29439a0
-
SHA1
2e074ba143275f103377d593eb064511c7606821
-
SHA256
8d01d2236514c2ae1947aa69718809d7eea2c85d1ffd04840c8993648c2fb0eb
-
SHA512
a2718c5f01fed5209bbb76e98616402b945af22f9ac90c3801578853df3137e1e0bb28f475cc15ee9019c6ed839d650c24d4109f9b8655126f3dd29dd7fdb571
-
SSDEEP
1536:s3VXBF79whFd2nMKiM6qNs4FyW5o1aaGhGpGqjFiFbewMd+oZVmHH:sp9whFCMeFyWrqjcMd+oZcn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d01d2236514c2ae1947aa69718809d7eea2c85d1ffd04840c8993648c2fb0ebN
Files
-
8d01d2236514c2ae1947aa69718809d7eea2c85d1ffd04840c8993648c2fb0ebN.exe windows:4 windows x86 arch:x86
5dd56eca6527e86640811cf00bdb82f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc40
ord704
ord4839
ord836
ord817
ord4623
ord479
ord5676
ord2473
ord5588
ord819
ord622
ord5584
ord3662
ord373
ord1627
ord3695
ord592
ord5658
ord4619
ord340
ord470
ord3248
ord3169
ord612
ord359
ord807
ord3681
ord4949
ord2992
ord708
ord488
ord4977
ord4996
ord888
ord961
ord889
ord962
ord4957
ord4965
ord3501
ord3484
ord2428
ord2436
ord5188
ord5003
ord3148
ord336
ord2735
ord489
ord709
ord3122
ord2993
ord4950
ord4987
ord3691
ord2543
ord706
ord484
ord3765
ord5031
ord265
ord3185
ord834
ord3764
ord2427
ord760
ord3682
ord2471
ord2426
ord3626
ord5049
ord5569
ord5570
ord808
ord2293
ord2094
ord486
ord835
ord360
ord483
ord729
ord762
ord731
ord481
ord613
ord3170
ord5154
ord5165
msvcrt40
_findfirst
_findnext
_mbsnbcpy
_itoa
??1type_info@@UAE@XZ
__dllonexit
_onexit
_exit
_XcptFilter
exit
__p___initenv
_initterm
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_findclose
_ismbcupper
_CxxThrowException
_mbctolower
_mbschr
_splitpath
_ftime
_purecall
time
_stat
_snprintf
_vsnprintf
_mbslen
_mbscmp
remove
getenv
atoi
?cin@@3Vistream_withassign@@A
?get@istream@@IAEAAV1@PADHH@Z
??6ostream@@QAEAAV0@PBD@Z
??6ostream@@QAEAAV0@H@Z
?endl@@YAAAVostream@@AAV1@@Z
?cout@@3Vostream_withassign@@A
__CxxFrameHandler
_mbsicmp
kernel32
EnterCriticalSection
LeaveCriticalSection
GetLastError
SetCurrentDirectoryA
WideCharToMultiByte
CloseHandle
DeleteCriticalSection
ReadDirectoryChangesW
CreateEventA
CreateFileA
Sleep
GetVersion
CopyFileA
InitializeCriticalSection
GetCurrentThreadId
ws2_32
gethostbyname
inet_addr
WSACleanup
WSAGetLastError
WSAAccept
htons
htonl
bind
closesocket
connect
recv
send
sendto
socket
select
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE