Static task
static1
Behavioral task
behavioral1
Sample
8fd268027f9529293466082695e60ddde63673bdb358bdc9683c933710e5b6e9.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8fd268027f9529293466082695e60ddde63673bdb358bdc9683c933710e5b6e9.exe
Resource
win10v2004-20230220-en
General
-
Target
8fd268027f9529293466082695e60ddde63673bdb358bdc9683c933710e5b6e9
-
Size
2.0MB
-
MD5
04035bde7fdc40d9c4eacdb727d019bf
-
SHA1
c202b2ab5963459e155ec0f839349eab63f34a1f
-
SHA256
8fd268027f9529293466082695e60ddde63673bdb358bdc9683c933710e5b6e9
-
SHA512
9202693255b31d58426da539c5658738dce15eeafb4bb7591f899c4221c3213463caae1e90560617fcf4db58aac5212dd8716005bb893aa775ab75e433350ac6
-
SSDEEP
24576:YBZ/ve+aiBDQW4UdmQzv6qjPQycHe2sT2ZpJBWF3RtWEpEreWoUi21cNm:YBZne+alq7QycHk2ISproFN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8fd268027f9529293466082695e60ddde63673bdb358bdc9683c933710e5b6e9
Files
-
8fd268027f9529293466082695e60ddde63673bdb358bdc9683c933710e5b6e9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 824KB - Virtual size: 821KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 940KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 212KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ