Static task
static1
Behavioral task
behavioral1
Sample
8f2c9d59ea50d9b8b48db83047ac82c14a931078f7d1feba759afe66a8e0e4e9.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8f2c9d59ea50d9b8b48db83047ac82c14a931078f7d1feba759afe66a8e0e4e9.exe
Resource
win10v2004-20230915-en
General
-
Target
8f2c9d59ea50d9b8b48db83047ac82c14a931078f7d1feba759afe66a8e0e4e9
-
Size
2.0MB
-
MD5
cb38de1453f5597ff7c6d067f1c1e8d9
-
SHA1
9002a6259b3608f0f6a167591cc059dd30b41d8e
-
SHA256
8f2c9d59ea50d9b8b48db83047ac82c14a931078f7d1feba759afe66a8e0e4e9
-
SHA512
59e57850765c669123c3b57917678873973700c99cd67e921aa58e6dec6ab5169ecd46006d3a98b57d4348cf50b412f8e46936a05bc369e3c9856cbb26cea747
-
SSDEEP
49152:0GZO0kt8VaIiVhUOIcCJpnKf0+ZBYL6K2pcXbTy:0GO8cI0hUQCJ0fnZS+YXn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f2c9d59ea50d9b8b48db83047ac82c14a931078f7d1feba759afe66a8e0e4e9
Files
-
8f2c9d59ea50d9b8b48db83047ac82c14a931078f7d1feba759afe66a8e0e4e9.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 939KB
IMAGE_SCN_MEM_READ
QQ369117 Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QQ369117 Size: 1.4MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QQ369117 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
QQ369117 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ