Static task
static1
Behavioral task
behavioral1
Sample
8ad3dba21a9f8b9cf353fe833fe7ebf2.exe
Resource
win7-20231129-en
General
-
Target
8ad3dba21a9f8b9cf353fe833fe7ebf2
-
Size
3.3MB
-
MD5
8ad3dba21a9f8b9cf353fe833fe7ebf2
-
SHA1
4b390da9ae831494926480cba65e27dcaadfec53
-
SHA256
f12fa90a599893fb2ae26708404437cd4c4353bd2a5f1946c724a1fbb8d149e2
-
SHA512
c463cafef91a99ee8e74ec4743cdf5ab6c5df14321ed315e78f5f1bb8995d12107c23b039ac9fca26e66983d0ccae4e060b3088d513623e54e81a6c620187a0f
-
SSDEEP
49152:0MZwhRXK3IapErHEbGs+E844r+vNrHNrMlT+faf2KTwTIdk8I3eT2tb5BNxs5BN4:tSXg2ddZiVrSlTQirU0LU5BPs5BPy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ad3dba21a9f8b9cf353fe833fe7ebf2
Files
-
8ad3dba21a9f8b9cf353fe833fe7ebf2.exe windows:4 windows x86 arch:x86
20dac6c521f8575996beb4cf49b5a698
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetShortPathNameA
Sections
Size: 748KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gutbbbut Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rgobyqsq Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE