Static task
static1
Behavioral task
behavioral1
Sample
8d7f03eee0739077f42a4c17c648b70f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8d7f03eee0739077f42a4c17c648b70f.exe
Resource
win10v2004-20231215-en
General
-
Target
8d7f03eee0739077f42a4c17c648b70f.exe
-
Size
409KB
-
MD5
8d7f03eee0739077f42a4c17c648b70f
-
SHA1
e5842707bfd6549936f9f2a6e5a0a0f7881d888b
-
SHA256
8554156b1e41eecc06e914b3b5756b41510df657f82966beb213ab9eea5c38a9
-
SHA512
216d4771e22c0668c57ef39003c3a9e2d939c06da08c107f732745440582bccd47ea4e447137420950349e97518711b1c490864610cbe675d12330d551c86a8b
-
SSDEEP
6144:it03a62hzpSNxV2qcJVLNyTiY6wDyIJ2r/blT:Os52hzpHq8eTi30yIQrDlT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d7f03eee0739077f42a4c17c648b70f.exe
Files
-
8d7f03eee0739077f42a4c17c648b70f.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
packerBY Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE