Static task
static1
Behavioral task
behavioral1
Sample
08cfa1c4a619bfbb6bb2fd815ae9d927.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
08cfa1c4a619bfbb6bb2fd815ae9d927.exe
Resource
win10v2004-20231215-en
General
-
Target
08cfa1c4a619bfbb6bb2fd815ae9d927
-
Size
572KB
-
MD5
08cfa1c4a619bfbb6bb2fd815ae9d927
-
SHA1
0e74d2f100f7ac77779b00794a93ad6322af563e
-
SHA256
f066b7635fc8617ba9e54cc19053d6f8b8af0e4d7eb2c38c07885fbb709f4c79
-
SHA512
716fde45e2db9f6c2c3ca25a3c8dfe8133f2548336a720ba827e68051e7e627883cac8106cbcdb240069930e77fa9924c4636c7a4269efad3744242cd982a5e9
-
SSDEEP
12288:wGtQWVoI+b7x2xCNOVQkh2KV2VPqH1HAg8tCVdAR5:HtQW6Iw7KJqkQKV2VPK1gyVdAR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08cfa1c4a619bfbb6bb2fd815ae9d927
Files
-
08cfa1c4a619bfbb6bb2fd815ae9d927.exe windows:4 windows x86 arch:x86
d5f2d8849813a4009dd8b330de1b3bde
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
DefWindowProcA
oleaut32
VariantChangeTypeEx
Sections
Size: 507KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE