Static task
static1
Behavioral task
behavioral1
Sample
8916fe6ba49006d7c7ccf662fcc0cf40.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8916fe6ba49006d7c7ccf662fcc0cf40.exe
Resource
win10v2004-20231222-en
General
-
Target
8916fe6ba49006d7c7ccf662fcc0cf40
-
Size
8KB
-
MD5
8916fe6ba49006d7c7ccf662fcc0cf40
-
SHA1
9adedebb760233ee24f6ccaf07d99b47dfa4195a
-
SHA256
30ca90f3b7ef546c0ae72c25d96d9ba443a7d93c8cdc62d4afee31814fa29b67
-
SHA512
903cb0fd58f430f00fb331d84046fa58fd4952f865cc265baf142c3aca91e6881f49cf80375333631ee1046b82ba0e5d3de001f661c1a60cae5542180eba868a
-
SSDEEP
96:rgCthUr4AZnCkR7JdtyJYLkW0luRXwtS1I6iX4O2OQD51mm:rzhUrplhRJdtyBo1s43OYWm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8916fe6ba49006d7c7ccf662fcc0cf40
Files
-
8916fe6ba49006d7c7ccf662fcc0cf40.exe windows:5 windows x86 arch:x86
48f23e2a844098b39c52f16662337803
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
LoadLibraryW
SleepEx
Sections
.text Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE