Static task
static1
Behavioral task
behavioral1
Sample
8e134781c3bdb1b6dda402febdf84880.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8e134781c3bdb1b6dda402febdf84880.exe
Resource
win10v2004-20231215-en
General
-
Target
8e134781c3bdb1b6dda402febdf84880
-
Size
36KB
-
MD5
8e134781c3bdb1b6dda402febdf84880
-
SHA1
4404ffc1eae2b7cc87f6f8f9d0e1cf061d5af63e
-
SHA256
f3feb399940f203b945ef5d94296faf4ff3b9b832d06ccd2dbba8d75742ff6e0
-
SHA512
0f5caa868540d1eba1860d1545b3338e9012cabb1703e7b00931fc62c638637d93379e10ab6f6d869f53d13a88be4072c6b499e8c82b30b136423a6af96abc4a
-
SSDEEP
768:RQGB/+K96BpEz/Lx/WQSkei9eJcPHSxY6WQbHsSacD4M8+TYfA:RQG0K9Giz/LFRXeiuzaE8MjTa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e134781c3bdb1b6dda402febdf84880
Files
-
8e134781c3bdb1b6dda402febdf84880.exe windows:1 windows x86 arch:x86
8b656ffd4a4f65b90a5e59e433209a11
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
*��
���9
*Z
���
�<�
user32
Hz�k
Sections
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
KK Size: 512B - Virtual size: 520B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE