Static task
static1
Behavioral task
behavioral1
Sample
8fb576e716932b3b621c16cacbc09649b466335236f0fa0875ffb7706dab0034.exe
Resource
win7-20230712-en
General
-
Target
8fb576e716932b3b621c16cacbc09649b466335236f0fa0875ffb7706dab0034
-
Size
4.2MB
-
MD5
6dc144922cd53d27b561798e3c783a88
-
SHA1
9b73c41a5ed06eab41ed06d9d908993f6f78f09c
-
SHA256
8fb576e716932b3b621c16cacbc09649b466335236f0fa0875ffb7706dab0034
-
SHA512
5152eeeb47bee872fd6a6cb10e733eb8a0ecc825dc3f05a566ebe8cc5060192b0d3fa17281d3f35b7903de0d0984f08c84528edd3aa871bdfb06185ad5e282f9
-
SSDEEP
98304:FqAOShxAY+cI3/fehOao7p0j6zlMlNQUgNK/iEJiFU0Nk:FqAOShGND3/fehVZ6JM+NKaEEFU0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8fb576e716932b3b621c16cacbc09649b466335236f0fa0875ffb7706dab0034
Files
-
8fb576e716932b3b621c16cacbc09649b466335236f0fa0875ffb7706dab0034.exe windows x64
79b3362178937bf9559741c46bb9e035
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
Sections
.MPRESS1 Size: 4.0MB - Virtual size: 8.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 195KB - Virtual size: 195KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE