Static task
static1
Behavioral task
behavioral1
Sample
08da5943080f81261b93808f04ddc621.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
08da5943080f81261b93808f04ddc621.exe
Resource
win10v2004-20231215-en
General
-
Target
08da5943080f81261b93808f04ddc621
-
Size
59KB
-
MD5
08da5943080f81261b93808f04ddc621
-
SHA1
7e9410465495c4224894c2e7afbec769abf48e53
-
SHA256
c850230252a2305c33ea5480c019b51f10315a3dd23dd57a90108314fd871dce
-
SHA512
e3b7b83f2b1adb15da396759df10956464ac6f6ddd20c53f3e3b280a7045e9807548b785f7a0135e19e2100e11ec23d868d5f7d5e10b886be7e3e80810435b29
-
SSDEEP
1536:kezx4lAqI78z6mRfResuUekr0K9XaK0CPqiWZ+Xww:kmx4lAhA66fUUJ+C8Ziww
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08da5943080f81261b93808f04ddc621
Files
-
08da5943080f81261b93808f04ddc621.exe windows:63301 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
iyrrqiqa Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ryqqjbyj Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zbyjayay Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
arabriaz Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ