Static task
static1
Behavioral task
behavioral1
Sample
f8e435ff8c79c8899929201fbad502ee.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f8e435ff8c79c8899929201fbad502ee.exe
Resource
win10v2004-20231215-en
General
-
Target
f8e435ff8c79c8899929201fbad502ee
-
Size
21KB
-
MD5
f8e435ff8c79c8899929201fbad502ee
-
SHA1
22e0ed415c1f29cabbace5d823bc197fbf347669
-
SHA256
79f494c9e52bced285e4d86d5d4d3279091aad9b586bb48c697d036086244201
-
SHA512
1fa0d696a82685294ef0cb5c18aba5cbbbabe443bff125da0896454debb69fcb7eb15421987229fe9a4b8413e1345301242672444fb836546f50eb8e8f219e7e
-
SSDEEP
384:5u3aABTgxadKmjOw8uUkLazUhGM7DWmvZnrUZ1O/4q+K:5u3aoT0uF8uUkLoUhjDZWZs/j+K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8e435ff8c79c8899929201fbad502ee
Files
-
f8e435ff8c79c8899929201fbad502ee.exe windows:4 windows x86 arch:x86
70a693aec4f19b6a7cb8b2986b750918
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadContext
GetTickCount
Sections
.text Size: 1024B - Virtual size: 774B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ