Static task
static1
Behavioral task
behavioral1
Sample
08c1bb4a45496398eb1d91eb13872ff3.exe
Resource
win7-20231129-en
General
-
Target
08c1bb4a45496398eb1d91eb13872ff3
-
Size
464KB
-
MD5
08c1bb4a45496398eb1d91eb13872ff3
-
SHA1
8f7789acfa74fe3f371c343d36b0b365785e6e8e
-
SHA256
f686ba6c0f518d8b578288393677aa52ee5983414a015b40e7280b193a3ba3ea
-
SHA512
28f8fc16065036c73a0c2de1fdae745138bb130bdb38312fd333b4e3aed393598403ad845655682a60c72f7161d20c832a37a5b9757f6b7f55c308b8234d9dfa
-
SSDEEP
12288:x3t96mfSNnZ3W4AyW0YU+2omQ83HNDkAgDhoZl:xj6mYZGtAjnXSn4l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08c1bb4a45496398eb1d91eb13872ff3
Files
-
08c1bb4a45496398eb1d91eb13872ff3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
nitxypjh Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hpreisrs Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gtsppldg Size: 440KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nyfyfpqu Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE