Static task
static1
Behavioral task
behavioral1
Sample
8929b2943ca6b59b0b8a97e71ef275a7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8929b2943ca6b59b0b8a97e71ef275a7.exe
Resource
win10v2004-20231215-en
General
-
Target
8929b2943ca6b59b0b8a97e71ef275a7
-
Size
78KB
-
MD5
8929b2943ca6b59b0b8a97e71ef275a7
-
SHA1
20a560bd65acc819e4a6ed4d9b07f49b061b6b80
-
SHA256
bd1908e541ddd14c6de9e849e64399c9a067a6d155807c517e176b94d8dbc8fd
-
SHA512
154d81e489df67b4aee5a1092749d14eecd405f8fab1a60e12d16aac9e721fb3192856c2faf8b33b3ac30def1de63c1478202e0b5866d4c4142b2d6559dcb35e
-
SSDEEP
1536:EAZgFcqNRWJzNc9PdLI5qRHaTOk92UlU8zLbAP2nioVP0+5gmB77N0JB:EAfJzNSJI+kL/HYmp5PB77SB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8929b2943ca6b59b0b8a97e71ef275a7
Files
-
8929b2943ca6b59b0b8a97e71ef275a7.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE