Static task
static1
Behavioral task
behavioral1
Sample
Laserstyle8.exe
Resource
win10-20240404-en
General
-
Target
Laserstyle8.exe
-
Size
2.1MB
-
MD5
abd4282a6414acae2f902aed0a887383
-
SHA1
285a354e41af4cdb74c0d254baf2648b33ea27a0
-
SHA256
30bd76c40aa657fe440f5e23057ed38d5d5d91053413b3f83835c9ebd6eaf591
-
SHA512
fcffe978f107a31b3303c39eaba80ab069c5ded12c64b1aee2623f1fd407cbd993641e56d5cf07c585b643131db7eef938ce11f99c80c229d6a4257339b7b310
-
SSDEEP
49152:HO3vIE6wJRjpQZ6mVu2pq2y8KuDwEIg96rGx8iE:8IEX/jpKVbO8KuDwEIg96rGxH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Laserstyle8.exe
Files
-
Laserstyle8.exe.exe windows:6 windows x86 arch:x86
3a7a04e8f947046331f7274b3b314c24
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateThread
Sleep
GetTickCount
GetACP
GetOEMCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetLastError
GetSystemDefaultLCID
GetVersion
TerminateThread
GetExitCodeThread
WaitForSingleObject
Sleep
CloseHandle
GetSystemTimeAsFileTime
IsBadReadPtr
GetCurrentThreadId
GetCurrentProcessId
EnterCriticalSection
InitializeCriticalSection
HeapFree
GetProcessHeap
HeapAlloc
DeviceIoControl
LocalFree
CreateFileA
LocalAlloc
InterlockedDecrement
InterlockedCompareExchange
CreateMutexA
ReleaseMutex
FormatMessageA
GetLastError
GetVolumeInformationA
GetEnvironmentVariableA
CreateThread
GetProcAddress
LoadLibraryA
TlsSetValue
TlsGetValue
TlsAlloc
SystemTimeToFileTime
GetSystemTime
FileTimeToSystemTime
GetCurrentProcess
TlsFree
GetModuleHandleA
ReadFile
WriteFile
GetFileSize
FindClose
GetLocalTime
SetErrorMode
FindFirstFileA
FindNextFileA
GetModuleFileNameA
InterlockedIncrement
HeapReAlloc
SearchPathA
CreateSemaphoreA
OpenSemaphoreA
ReleaseSemaphore
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
GetVersion
GetModuleHandleA
GetProcAddress
GetPrivateProfileIntA
msvcrt
strncmp
setupapi
SetupDiEnumDeviceInfo
advapi32
GetUserNameA
comctl32
InitCommonControlsEx
InitCommonControlsEx
user32
IsWindow
ShowWindow
GetClassNameA
GetWindowThreadProcessId
GetWindow
SetWindowPos
GetDlgItem
UpdateWindow
SetWindowTextW
GetWindowTextW
GetClientRect
GetWindowRect
SendMessageA
EnumWindows
GetDesktopWindow
MessageBoxW
GetWindowLongA
SetWindowLongA
DefWindowProcA
MessageBoxA
EnableWindow
vntools
?GetMessageMap@CVnSplashBmpTransparent@@MBEPBUAFX_MSGMAP@@XZ
mfc110
ord6809
msvcr110
_itoa
shell32
ShellExecuteA
gdiplus
GdiplusStartup
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.protect Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE