Static task
static1
Behavioral task
behavioral1
Sample
085cc960cad71eadc5d9ccd0d3f5affc.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
085cc960cad71eadc5d9ccd0d3f5affc.exe
Resource
win10v2004-20231215-en
General
-
Target
085cc960cad71eadc5d9ccd0d3f5affc
-
Size
685KB
-
MD5
085cc960cad71eadc5d9ccd0d3f5affc
-
SHA1
5b12f8dd4a0d27fd9d8c0d22c4a1f639ed5abb23
-
SHA256
ff0d82f607ebbb1d6acc4cf18754e945c438fb301350c0a7df68bf83b94f5b81
-
SHA512
e8f5b2cab393b094819320aee2eb9828f179956b15368b4e94f46f6e3d4b31e85d1b6f048a6329d7711d692bb4edffd9fa909450e66025a8e6453a7ef24192e0
-
SSDEEP
12288:ew1QA4OFhJz4zyHRMzq/uy+K0YSJ/ZF3Z4mxxO/H7d5G1swCw4ac:dQA4pyHSzPbY8ZQmXO/bd5G1swCwa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 085cc960cad71eadc5d9ccd0d3f5affc
Files
-
085cc960cad71eadc5d9ccd0d3f5affc.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 18KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE