Static task
static1
Behavioral task
behavioral1
Sample
8aa9cd9e271a21a3eaaa32a0bbc1e7bd.exe
Resource
win7-20231215-en
General
-
Target
8aa9cd9e271a21a3eaaa32a0bbc1e7bd
-
Size
479KB
-
MD5
8aa9cd9e271a21a3eaaa32a0bbc1e7bd
-
SHA1
7ea1af8a5b8d74a14c0c57cee0dc370e5b3e9392
-
SHA256
7a8cf0f24e64b30f0e84c92cadb602ce9bbebd909695a947adbfdd6fce8c337c
-
SHA512
770afd7d23b2b62f704bd4ab1e34b2c153b69e1c78c05a4df91e1a7ebdb6df4229bc8cd9430387079dc2b9ecaecad4d12cde644ebe4ed879d45ecc73ae58a2a2
-
SSDEEP
12288:2knCNPl6EpboTIPq9lMlfLru54cVaCZpuzA243buzVl:2kn0l6ybMIPIwfLru54cIOxO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8aa9cd9e271a21a3eaaa32a0bbc1e7bd
Files
-
8aa9cd9e271a21a3eaaa32a0bbc1e7bd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 365KB - Virtual size: 892KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE