Static task
static1
Behavioral task
behavioral1
Sample
f8c7937f364a34e53fc058682767087c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f8c7937f364a34e53fc058682767087c.exe
Resource
win10v2004-20231215-en
General
-
Target
f8c7937f364a34e53fc058682767087c
-
Size
422KB
-
MD5
f8c7937f364a34e53fc058682767087c
-
SHA1
202f856e4857dad8f38211580921ba32fef6fe84
-
SHA256
2a61aad49dd65e3f219e8e71cf331fd179c334da4d61b4062e9c40fbbe941920
-
SHA512
910ac5ae6cf780eb39c8a5beaa1a6e089e399a3b2e535d8e8cd2dd2e349988eeb144df401810a9d14aeff307f4fb2c2391288a31ff4d79fd0afdbeeb99a208fc
-
SSDEEP
12288:ysHIB7QkKRaug8yeikCykaAOl13l0Pz8MBqIa:ysHU7+h5yeilykkln0PzZBqIa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8c7937f364a34e53fc058682767087c
Files
-
f8c7937f364a34e53fc058682767087c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 243KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ