Static task
static1
Behavioral task
behavioral1
Sample
8900b8b7888aaeb62c35dd182d37f0ab.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8900b8b7888aaeb62c35dd182d37f0ab.exe
Resource
win10v2004-20231215-en
General
-
Target
8900b8b7888aaeb62c35dd182d37f0ab
-
Size
47KB
-
MD5
8900b8b7888aaeb62c35dd182d37f0ab
-
SHA1
e4ae2647ad2589d8454dd2e76bc0f7d1d70416b9
-
SHA256
d52d7c34e46a54dcf5ee4ec2c8f7f2c923e259af6d4bf921ac6ce183fcf93fde
-
SHA512
abbe690160ac990b7d49f0bf35cb9d254bafb5589c03666ab599219f29ef42f1b48f3015798906988e2796b31f699c7157611391294c4b65b877a6c20bcce2cf
-
SSDEEP
768:TS25ITyA2JP21oTQbaZ2eexahX84JsvUIoNWHmFvPvNrn0C2Dou95Qs/E4SxS3xY:TS22epJemTQbasU84JsiNWGdT85Qs843
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8900b8b7888aaeb62c35dd182d37f0ab
Files
-
8900b8b7888aaeb62c35dd182d37f0ab.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 159B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
zzzzzzzz Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE