Static task
static1
Behavioral task
behavioral1
Sample
86d4e99ed47db65a9aafcb0188adb4aa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
86d4e99ed47db65a9aafcb0188adb4aa.exe
Resource
win10v2004-20231215-en
General
-
Target
86d4e99ed47db65a9aafcb0188adb4aa
-
Size
187KB
-
MD5
86d4e99ed47db65a9aafcb0188adb4aa
-
SHA1
225774b11768165351e399d8fba7bf379772d58c
-
SHA256
eb6a88418927882e37917baed24b42ce7034ecd28f7a76b3bb81e4efc9884e43
-
SHA512
c56a13d2ab39bce861b764c561c378c696cc3fcd7054425f7ef19c2b3ef7c2253e3ef34da1e6540c10d611edf6b47528e6e4d3dc2735937dba37bf68e350e18c
-
SSDEEP
3072:iZHhPj97+aT0LQYjDpQUhSnywqdz052wpoeXAG7pu343iA3zYnMv:CBPp3T0LQYxTIybz0kwpoeXAypScimUi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86d4e99ed47db65a9aafcb0188adb4aa
Files
-
86d4e99ed47db65a9aafcb0188adb4aa.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rawdat Size: 172KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE