Static task
static1
Behavioral task
behavioral1
Sample
a8e2b81a9db1543cb37c6667959260fd0e92ccc3e8c3cfcee4dcd5026aac51d3N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a8e2b81a9db1543cb37c6667959260fd0e92ccc3e8c3cfcee4dcd5026aac51d3N.exe
Resource
win10v2004-20240802-en
General
-
Target
a8e2b81a9db1543cb37c6667959260fd0e92ccc3e8c3cfcee4dcd5026aac51d3N
-
Size
44KB
-
MD5
f7781b8cde106b92c225f9b55a956460
-
SHA1
b82effd7fd4f4dfabc58e441fb59494c79360275
-
SHA256
a8e2b81a9db1543cb37c6667959260fd0e92ccc3e8c3cfcee4dcd5026aac51d3
-
SHA512
e5855a5b0936ca85dd86dc105ed0c76f119d814b48974e1d8d8e46cbd4bf9d3e7131884fa1d1a1a47baf58885efc563cd750a93d30a7420099ee914d0758dc17
-
SSDEEP
768:sOZF0q1yZfxcmIMQlpENXXsvUSBkVK8UCRDPLjc6dyKiQ4zKY:hjB4Zf+rWX8vUSB4K8UCRDGKiQ4z/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8e2b81a9db1543cb37c6667959260fd0e92ccc3e8c3cfcee4dcd5026aac51d3N
Files
-
a8e2b81a9db1543cb37c6667959260fd0e92ccc3e8c3cfcee4dcd5026aac51d3N.exe windows:4 windows x86 arch:x86
41f87df4a1a537d0d91a02db5959ff5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FindWindowA
CloseClipboard
SetClipboardData
EmptyClipboard
BlockInput
SetForegroundWindow
SetFocus
ShowWindow
keybd_event
VkKeyScanA
OpenClipboard
wsprintfA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
VariantClear
SysFreeString
SysAllocString
VariantInit
kernel32
GetStartupInfoA
GlobalAlloc
LocalFree
WideCharToMultiByte
OpenProcess
TerminateProcess
TerminateThread
InterlockedDecrement
GlobalLock
GlobalUnlock
lstrlenA
GetLastError
GetWindowsDirectoryA
CopyFileA
GetFileSize
ReadFile
WriteFile
DeleteFileA
GetFileAttributesA
CreateThread
lstrcmpiA
GetModuleHandleA
WaitForSingleObject
CloseHandle
Sleep
WinExec
CreateProcessA
SetFileAttributesA
ExpandEnvironmentStringsA
GetModuleFileNameA
ExitProcess
GetProcAddress
LoadLibraryA
ExitThread
ReleaseMutex
GetTickCount
CreateMutexA
GetLocalTime
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileTime
CreateFileA
GetLocaleInfoA
GetVersionExA
msvcrt
_CxxThrowException
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_strdup
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
_controlfp
wcslen
strcpy
strchr
strlen
memset
_snprintf
sprintf
memcmp
strncpy
srand
strtok
strcmp
_vsnprintf
??2@YAPAXI@Z
memcpy
strstr
_strlwr
rand
strcat
fread
fopen
free
strncat
malloc
toupper
__CxxFrameHandler
atoi
advapi32
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE