Static task
static1
Behavioral task
behavioral1
Sample
b8cddc5134178bcf00f7e32c8d8229002fcf3bc6a5c689f42c76ab24577f14c5.exe
Resource
win7-20241010-en
General
-
Target
b8cddc5134178bcf00f7e32c8d8229002fcf3bc6a5c689f42c76ab24577f14c5
-
Size
55KB
-
MD5
2560434d7a5b2647f07593ad6d8a6d10
-
SHA1
13dda438bf017484aac809ee7887039bf8d2fffa
-
SHA256
b8cddc5134178bcf00f7e32c8d8229002fcf3bc6a5c689f42c76ab24577f14c5
-
SHA512
bed17b60f905fa66383eef0f08de030707d70e1b4e0884f36ce0ff9f0e6e61c1819817517009167c1e8cd65c045185b77b0f4028b1bfb824f7ab954099f379f8
-
SSDEEP
1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT7O:qwda7KVr0cHneunw1O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8cddc5134178bcf00f7e32c8d8229002fcf3bc6a5c689f42c76ab24577f14c5
Files
-
b8cddc5134178bcf00f7e32c8d8229002fcf3bc6a5c689f42c76ab24577f14c5.exe windows:5 windows x86 arch:x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
POLSJDKW Size: - Virtual size: 136KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
POLSJDKW Size: 54KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE