Static task
static1
Behavioral task
behavioral1
Sample
8db6bc885b3ba4943befbd8fa7a37a85cf884d6247c7762a83fe170cd62d2475.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8db6bc885b3ba4943befbd8fa7a37a85cf884d6247c7762a83fe170cd62d2475.exe
Resource
win10v2004-20230220-en
General
-
Target
8db6bc885b3ba4943befbd8fa7a37a85cf884d6247c7762a83fe170cd62d2475
-
Size
1.4MB
-
MD5
787d8cc3158385964b49c62147cdd025
-
SHA1
28da8061e4f62f073da2f9a3a128d2b75701df96
-
SHA256
8db6bc885b3ba4943befbd8fa7a37a85cf884d6247c7762a83fe170cd62d2475
-
SHA512
a6622e397e467870c87c1ac6cb7b558713870c3efb93c6684d30c1c6635e945ea2f438a40e7982e9ba3d66bfe7c7ada0b70322bc558e9f0ea42635710181c279
-
SSDEEP
24576:tNSDFv8VA9KWRi854qRSSm4zvFw/PlW2cGaCj5ErjMvy:tNg0zGXggwnlWaj5a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8db6bc885b3ba4943befbd8fa7a37a85cf884d6247c7762a83fe170cd62d2475
Files
-
8db6bc885b3ba4943befbd8fa7a37a85cf884d6247c7762a83fe170cd62d2475.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 815KB - Virtual size: 815KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ