Static task
static1
Behavioral task
behavioral1
Sample
8c1f39b530adef48e91487a378cad27b9fa5a63abce6c3942aaf8107b4b45459N.exe
Resource
win7-20240903-en
General
-
Target
8c1f39b530adef48e91487a378cad27b9fa5a63abce6c3942aaf8107b4b45459N
-
Size
100KB
-
MD5
e58f03e6171b624e19b5ed1db49b4ee0
-
SHA1
f4bcc149ce52c657e5b01003c9afff03da042796
-
SHA256
8c1f39b530adef48e91487a378cad27b9fa5a63abce6c3942aaf8107b4b45459
-
SHA512
972af9e99cc55dc7c1837fb64e892b634cb103f84e15ecc7436848339c14bc45f861bf5fc2997989984b0b94b780462da0892af42e126edb2ad2273e9a1f3ca1
-
SSDEEP
1536:nQyLj3TgEKI9FB+JcBj6YJ2ZsX5Vl50FQGKIcJ3h+0PfKEGJNokSEHi2FTp8Dc:nBj3TgEVBSAxUG5K2TIQESGwKPF8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c1f39b530adef48e91487a378cad27b9fa5a63abce6c3942aaf8107b4b45459N
Files
-
8c1f39b530adef48e91487a378cad27b9fa5a63abce6c3942aaf8107b4b45459N.exe windows:4 windows x86 arch:x86
6139f895b7f2848f84f78d7d4088be13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
lstrlenA
lstrcatA
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStrings
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
WinExec
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
HeapDestroy
HeapCreate
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
VirtualAlloc
VirtualFree
RtlUnwind
WriteFile
GetProcAddress
GetStringTypeA
GetStringTypeW
LoadLibraryA
user32
wsprintfA
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE