Static task
static1
Behavioral task
behavioral1
Sample
8cc8a72c6230ff43497164da078bd5db.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8cc8a72c6230ff43497164da078bd5db.exe
Resource
win10v2004-20231215-en
General
-
Target
8cc8a72c6230ff43497164da078bd5db
-
Size
128KB
-
MD5
8cc8a72c6230ff43497164da078bd5db
-
SHA1
db4d0d265eb197561d260b1470ba9cfbe31b3513
-
SHA256
033356435e5559b6fabc35f22bd47e6c9ee595e0b6ebd80c386ad8f905b1a0e8
-
SHA512
38e4c8031fdd4204793285ddc9249955176540cb7289d447cb92dcf6058a4ee75708fcf6c5aa0407a3393fae65ef0960281e13b9a3d06d9f18a17f86770a0ee0
-
SSDEEP
3072:AKAXSeN2IOQAsfvk53LkcWzKJR6jPQzBXhc5y8aRawEcl/:pW0IhAsfs53LbJoe2NaRUcl/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cc8a72c6230ff43497164da078bd5db
Files
-
8cc8a72c6230ff43497164da078bd5db.exe windows:4 windows x86 arch:x86
0ee5060a7d20463372cfdfe0b39b02b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
LoadLibraryA
ExitProcess
user32
MessageBoxA
wsprintfA
Sections
.text Size: 4KB - Virtual size: 96B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ