Behavioral task
behavioral1
Sample
8795083835cdb4acd39122737700c4a7.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
8795083835cdb4acd39122737700c4a7.exe
Resource
win10v2004-20231020-en
General
-
Target
8795083835cdb4acd39122737700c4a7.bin
-
Size
424KB
-
MD5
8795083835cdb4acd39122737700c4a7
-
SHA1
c54efc6dd3d9e470aa1cea5a9c334ed001a4e438
-
SHA256
4dbe2664aa5d662d6e5ada04f983b442983220db0b4c708ca5367d8c4f143ff3
-
SHA512
5a4446b430f9b341a860622cda81f1a01f9297ba28c2a2b6eebd83439c3d530b63d537455fc95caf9b492caa329b5565a717c05d6997215830e63a242cbe5c05
-
SSDEEP
3072:Qhbs8dCWJ1RUEqJkZjXh++CHkuv5GGJG14X9SsQ4HsSX7L16FX:6bPJ+EqJUh4Hkuv5GGJGO1XsSX7LkF
Malware Config
Signatures
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8795083835cdb4acd39122737700c4a7.bin
Files
-
8795083835cdb4acd39122737700c4a7.bin.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 393KB - Virtual size: 393KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ