Static task
static1
Behavioral task
behavioral1
Sample
a8b321eee61b147074177c2b080b06856bfd6bb7951235fdd25b3b1397f945d5.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a8b321eee61b147074177c2b080b06856bfd6bb7951235fdd25b3b1397f945d5.exe
Resource
win10v2004-20230915-en
General
-
Target
a8b321eee61b147074177c2b080b06856bfd6bb7951235fdd25b3b1397f945d5
-
Size
674KB
-
MD5
43ea4c523f5cb12c76fa360246c6f335
-
SHA1
28eb149868d0cb030bb714a2240928a05f2a0e89
-
SHA256
a8b321eee61b147074177c2b080b06856bfd6bb7951235fdd25b3b1397f945d5
-
SHA512
74d595d240137bb37c40415386d260773a86f52df295df8645d93d7a29ff7959d9089e60f687b6a0ad7c4c463fff76de771ccf79250810520d56ca6fe78b3dc1
-
SSDEEP
12288:jZ3UxbLYh8tMNOSDsQkjznviHwXzjtpQ9tNR5PJrLn:jZkVftMESAQmv4CZGj5p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8b321eee61b147074177c2b080b06856bfd6bb7951235fdd25b3b1397f945d5
Files
-
a8b321eee61b147074177c2b080b06856bfd6bb7951235fdd25b3b1397f945d5.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 564KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.������ Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE