Static task
static1
Behavioral task
behavioral1
Sample
8f8bae4cb42d03329a694bb2c01088cf65ba415dc9ed6d0ab3cc0cebe4338e7b.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8f8bae4cb42d03329a694bb2c01088cf65ba415dc9ed6d0ab3cc0cebe4338e7b.exe
Resource
win10v2004-20230915-en
General
-
Target
8f8bae4cb42d03329a694bb2c01088cf65ba415dc9ed6d0ab3cc0cebe4338e7b
-
Size
6.9MB
-
MD5
4d06b74e4d5bcfbcee3ebd35badbd783
-
SHA1
f2356385e768b729a5037e71f93ca97177034df4
-
SHA256
8f8bae4cb42d03329a694bb2c01088cf65ba415dc9ed6d0ab3cc0cebe4338e7b
-
SHA512
be734b772dcc1e946b41d53d4c094fd0d4d5ad754b9365f358cb74e6d5b3d37bac6db934d81fd5fca4829a44c90441f1a09e71377b2ca2a8fab23f7668ba0f63
-
SSDEEP
196608:TqKyaJuEgAmi13hR5otPxoZGoz9TbkLWR4T5:OKyaYBw3J0PxoZhz9T4LWR4T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f8bae4cb42d03329a694bb2c01088cf65ba415dc9ed6d0ab3cc0cebe4338e7b
Files
-
8f8bae4cb42d03329a694bb2c01088cf65ba415dc9ed6d0ab3cc0cebe4338e7b.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 8.5MB
IMAGE_SCN_MEM_READ
VProtect Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 164KB - Virtual size: 164KB
IMAGE_SCN_MEM_READ