Static task
static1
Behavioral task
behavioral1
Sample
8c846c377b717fbfa3cf06f2cef0bf15cf490189b19f56f3b70e63203f3d5ad0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8c846c377b717fbfa3cf06f2cef0bf15cf490189b19f56f3b70e63203f3d5ad0.exe
Resource
win10v2004-20231215-en
General
-
Target
8c846c377b717fbfa3cf06f2cef0bf15cf490189b19f56f3b70e63203f3d5ad0
-
Size
5.2MB
-
MD5
b80ce987276d14522b5293bc9d7a2c09
-
SHA1
4285ca06f0ea08e7d61ddaa210fe49dec565cdf4
-
SHA256
8c846c377b717fbfa3cf06f2cef0bf15cf490189b19f56f3b70e63203f3d5ad0
-
SHA512
b53bb8254e14cafdc13272d9197b93d7eb5d9d6d0d430ee0d451c313b557d8907ecdc830cd3d2924b14ff67cabaf27ee10e8d25d25221b8f78f783ea0dabf2b0
-
SSDEEP
49152:HG2AFY1e1R1NoO42S3YcNr+om8eRqWxFNrakPJOmdulhu39wURo:HvA7jnmr+bTR5V74u9wU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c846c377b717fbfa3cf06f2cef0bf15cf490189b19f56f3b70e63203f3d5ad0
Files
-
8c846c377b717fbfa3cf06f2cef0bf15cf490189b19f56f3b70e63203f3d5ad0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 1001KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 980KB - Virtual size: 977KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.enigma1 Size: 124KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE