Static task
static1
Behavioral task
behavioral1
Sample
887b64ecff7ffd26994e0370d69868bb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
887b64ecff7ffd26994e0370d69868bb.exe
Resource
win10v2004-20231215-en
General
-
Target
887b64ecff7ffd26994e0370d69868bb
-
Size
127KB
-
MD5
887b64ecff7ffd26994e0370d69868bb
-
SHA1
5bcd1bf2b5a6760afaaa5b02eb2d85c0701ddf96
-
SHA256
abb2c4806be99ae5412570348b2f9f3d42ca33a07287ba26b7ba509c9db425c8
-
SHA512
e10dae23d18ac59e1e41a49429dffd07db0ecaccc1cc267194d5a1bd1ffbe2bda75d603e4f39e61935d66d4e459c351615c105d71726007a9c66495fa7c4dd08
-
SSDEEP
1536:ZpgKvgYIJsDaDdPaAwGDIEIfwpVHRKLrJ7wwqI1nTpWhMvWVZwKwynzhBPX9thG0:nDSOmltwfGVxKCvHzWUllFvvtm8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 887b64ecff7ffd26994e0370d69868bb
Files
-
887b64ecff7ffd26994e0370d69868bb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
9koo0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9koo1 Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9koo2 Size: 475B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE