Static task
static1
Behavioral task
behavioral1
Sample
08827c02622617e5b5dacf5ba2b2ec8e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
08827c02622617e5b5dacf5ba2b2ec8e.exe
Resource
win10v2004-20231215-en
General
-
Target
08827c02622617e5b5dacf5ba2b2ec8e
-
Size
399KB
-
MD5
08827c02622617e5b5dacf5ba2b2ec8e
-
SHA1
af1f75e51ee83e16502443942e43d4ffdaa7894c
-
SHA256
e80c1deb61f491d80ab70540b127e34107848056da59a406e562b83c290a1322
-
SHA512
6b8aa628aa3fbc6379b7aa8267aa75ef36b8710e8d36fd0c239595e8aeeb466c63955be275911eb36332487bcf2ef7dfb60997757df0e187241e6bb98d65fae7
-
SSDEEP
6144:oL3OBt3hJYu4Eu6biOsM83CEW41As8kHYw+839tZzTg/0+mQHoi:oL+Bf2u0E8SEWhJaB+839zTgIQHp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08827c02622617e5b5dacf5ba2b2ec8e
Files
-
08827c02622617e5b5dacf5ba2b2ec8e.exe windows:4 windows x86 arch:x86
aa1ca832e28e2c6a63685365c58b52b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadModule
user32
MessageBoxA
Sections
.text Size: - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 355KB - Virtual size: 355KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ