Static task
static1
Behavioral task
behavioral1
Sample
08a946d7c15638485e8586cc5adddffc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
08a946d7c15638485e8586cc5adddffc.exe
Resource
win10v2004-20231215-en
General
-
Target
08a946d7c15638485e8586cc5adddffc
-
Size
191KB
-
MD5
08a946d7c15638485e8586cc5adddffc
-
SHA1
fcb6c3f28ddf0db08bfb4ebba1aaf07dede4919d
-
SHA256
64a9703ba26b0c9b179df2438e0528c8bcb288f6c0829514a7ffea25315974b9
-
SHA512
2c82eb2d5f635bdc8a17650e098aa63d804fe8fb2793b5e2c6b4dbe38445aabec96457cdb9236c1427c9213322061b9d4ce656896eaf0e7920e5fce0eddef351
-
SSDEEP
3072:dBimVsITUf+tlRxeliDQTREVHqHpGid/PsvwZQlKpJq8I9v2936:dBiCV2tTTPd/PsGLJq8ev2h6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08a946d7c15638485e8586cc5adddffc
Files
-
08a946d7c15638485e8586cc5adddffc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
XJ Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE