Static task
static1
Behavioral task
behavioral1
Sample
c8e41847f4d91850b4382d15c62bf64ce501c01a76d4ac68dfd79d59a5ad0e6d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c8e41847f4d91850b4382d15c62bf64ce501c01a76d4ac68dfd79d59a5ad0e6d.exe
Resource
win10v2004-20230915-en
General
-
Target
c8e41847f4d91850b4382d15c62bf64ce501c01a76d4ac68dfd79d59a5ad0e6d
-
Size
761KB
-
MD5
eaa739a00dabf4dc183f3f7b95e03a72
-
SHA1
561b11b75eb7e30d9c40184e24099ec91e2bf5ea
-
SHA256
c8e41847f4d91850b4382d15c62bf64ce501c01a76d4ac68dfd79d59a5ad0e6d
-
SHA512
1f6e92ebe8cd5ffef2b0380b32d74dd4ec59ddff091d7b27ad80998a34107a8cc900f678f9d6a7211b4ae24c164648b28de17266d19d6e244770c9a507d114ba
-
SSDEEP
12288:RBIvntvGVHhzp+assss/L7/+LwtipxKWgCA4BXMipdQcU11L5:/gFf2rkK1CxBcim11L5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8e41847f4d91850b4382d15c62bf64ce501c01a76d4ac68dfd79d59a5ad0e6d
Files
-
c8e41847f4d91850b4382d15c62bf64ce501c01a76d4ac68dfd79d59a5ad0e6d.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.giats Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.ftsafe Size: 550KB - Virtual size: 550KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE