Static task
static1
Behavioral task
behavioral1
Sample
85b0d4c9aac90711eb1ff70e6e552d9a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
85b0d4c9aac90711eb1ff70e6e552d9a.exe
Resource
win10v2004-20231215-en
General
-
Target
85b0d4c9aac90711eb1ff70e6e552d9a
-
Size
820KB
-
MD5
85b0d4c9aac90711eb1ff70e6e552d9a
-
SHA1
54be35a28d46363391f81a78f9f48c0235d12148
-
SHA256
ee269d0b0c1d1a6f8fac0b94c7d0b0bfbaee3898e80c77490110b09d51be2dcf
-
SHA512
c5388edfae6b0f2f105507cdd99cccf966694963f69c2bea59abbd6a64821b3aa15842ef3a617b7a935b01c8035eaccd6463dbec283476cef1c9ec8ec75c648a
-
SSDEEP
12288:FttZ4tIaLb0xvf3Opq38IO3Go1QKBPszUtrMR4UCFTm5IQJuZSUQ2VZ5mq5xbRm0:FttZ4tuxC26rM5CFdHsq5xb8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85b0d4c9aac90711eb1ff70e6e552d9a
Files
-
85b0d4c9aac90711eb1ff70e6e552d9a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
filg30 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
filg31 Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
filg32 Size: 732B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE