Static task
static1
Behavioral task
behavioral1
Sample
d8d88ce92f64881cb75e7f6d3f7021500b0eface076d6d948d48ddf29ec1bede.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d8d88ce92f64881cb75e7f6d3f7021500b0eface076d6d948d48ddf29ec1bede.exe
Resource
win10v2004-20231215-en
General
-
Target
d8d88ce92f64881cb75e7f6d3f7021500b0eface076d6d948d48ddf29ec1bede
-
Size
4.0MB
-
MD5
3f9a88f7dd34b9e9b0eaa0737ab45261
-
SHA1
43c93308a9ffbcc6f135b07bee3eca3729fff1ec
-
SHA256
d8d88ce92f64881cb75e7f6d3f7021500b0eface076d6d948d48ddf29ec1bede
-
SHA512
90194298123a9c8f149cb5528c8cdaf23b8ba8a91e7504477d0c54367cd3668c16fb46bb3d292a3e590a40f81f8fb0dedfe05235817ba990da3efd4e4eee19cc
-
SSDEEP
49152:9TrbMb8oVQSy1W7EXHqiHvryQROaXbSSqrgnscrfkF7BKhU2vT5TO1:Vro8MQeAaurRFtqrgscrkj2vT5K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d8d88ce92f64881cb75e7f6d3f7021500b0eface076d6d948d48ddf29ec1bede
Files
-
d8d88ce92f64881cb75e7f6d3f7021500b0eface076d6d948d48ddf29ec1bede.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ