Static task
static1
Behavioral task
behavioral1
Sample
8f8de0821fefb48636dbbc96e1000b147bdcb05fba970bb87731af4544c719d2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8f8de0821fefb48636dbbc96e1000b147bdcb05fba970bb87731af4544c719d2.exe
Resource
win10v2004-20230915-en
General
-
Target
8f8de0821fefb48636dbbc96e1000b147bdcb05fba970bb87731af4544c719d2
-
Size
12.1MB
-
MD5
705b699c015c95e7b0f854f6857e6e22
-
SHA1
28f7cf410db3a7a4a4b46129480958a59f4dc4ce
-
SHA256
8f8de0821fefb48636dbbc96e1000b147bdcb05fba970bb87731af4544c719d2
-
SHA512
343bc6fa725344952e385c59605a9eeb133590d1ac5eae9f0d79d0211fae4c4cf9c0550707d007f1157724df1e2e5c6eb3c19416bae361138339b7b1011ac112
-
SSDEEP
196608:+L6SLa4w14D/mV79x+9VqG0uTd+TpnAA/gMRHnaAyaOf/p9dWhr68RgmKSn:ouuO9x+9tTdvSrHwaOf/Td+6PmK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f8de0821fefb48636dbbc96e1000b147bdcb05fba970bb87731af4544c719d2
Files
-
8f8de0821fefb48636dbbc96e1000b147bdcb05fba970bb87731af4544c719d2.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 852KB - Virtual size: 852KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gehcont Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gxfg Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.retplne Size: 4KB - Virtual size: 4KB
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.voltbl Size: 4KB - Virtual size: 4KB
_RDATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11.1MB - Virtual size: 11.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.l1 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE