Static task
static1
Behavioral task
behavioral1
Sample
a8c7d1d11520dc9a09abb8836629cee090bdaf0a2d192237b8d1c800e4e1072b.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
a8c7d1d11520dc9a09abb8836629cee090bdaf0a2d192237b8d1c800e4e1072b.exe
Resource
win11-20240508-en
General
-
Target
a8c7d1d11520dc9a09abb8836629cee090bdaf0a2d192237b8d1c800e4e1072b
-
Size
278KB
-
MD5
44feab375c97730ba9bde174df19a29f
-
SHA1
7e9056ecc7cdf3112c3bfb181b026228a85c1617
-
SHA256
a8c7d1d11520dc9a09abb8836629cee090bdaf0a2d192237b8d1c800e4e1072b
-
SHA512
81711a15c0c0ba5b4fd643084b46fb0dff7348d0f1ce30019ac5a083bff1d242ddf1d940e4efb010cbecc4702e2d1dfc8991f09a57ef62390938a9e10e6b0d69
-
SSDEEP
3072:xCBLUOA5G/lo0h2joKEWjy3FRaR/4O5WJ1+ZtQXGRh2fXvHAddkxrj:x8LUOAorEoJ4cFRKauZtQpXvnrj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource a8c7d1d11520dc9a09abb8836629cee090bdaf0a2d192237b8d1c800e4e1072b
Files
-
a8c7d1d11520dc9a09abb8836629cee090bdaf0a2d192237b8d1c800e4e1072b.exe windows:5 windows x86 arch:x86
c2d3832e8e5065c91e404ae78f825411
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetVolumeMountPointW
SetCommBreak
SleepEx
GetCommProperties
GetModuleHandleW
GetTickCount
GetConsoleTitleA
ActivateActCtx
GlobalAlloc
GetConsoleAliasExesLengthW
WriteConsoleOutputA
lstrcpynW
GetModuleFileNameW
GetConsoleAliasesW
CreateJobObjectW
GetProcAddress
SetFileApisToOEM
LoadLibraryA
WriteConsoleA
UnhandledExceptionFilter
InterlockedExchangeAdd
LocalAlloc
AddAtomW
AddAtomA
FoldStringW
lstrcatW
BuildCommDCBA
FindFirstVolumeW
EnumCalendarInfoExA
OpenJobObjectA
GetLogicalDriveStringsW
GetLastError
GetComputerNameA
CloseHandle
MultiByteToWideChar
GetStartupInfoW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DeleteCriticalSection
Sleep
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RtlUnwind
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
InitializeCriticalSectionAndSpinCount
ReadFile
CreateFileA
gdi32
GetCharWidth32W
advapi32
EnumDependentServicesW
ole32
CoTaskMemAlloc
winhttp
WinHttpAddRequestHeaders
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 31.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ