Static task
static1
Behavioral task
behavioral1
Sample
8d7a862a5c9adb2db79e920413319744.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8d7a862a5c9adb2db79e920413319744.exe
Resource
win10v2004-20231222-en
General
-
Target
8d7a862a5c9adb2db79e920413319744
-
Size
713KB
-
MD5
8d7a862a5c9adb2db79e920413319744
-
SHA1
71fdc4c203b3eb95c7e4fafb6f8167e990987be5
-
SHA256
6e0185d9238723084ef916c0ba5ef6d20d10cc9a80ac67113b52b172968f608d
-
SHA512
dac424444257f6ea52fe3a6e675224b890c5cbd7f25ef261996d01e109d01e9e50793da7c3caf8e6aec86afede35a2fa4974b403bad291b4cb8afa0bceccfa4c
-
SSDEEP
12288:kJvS+q4FmBxkQSsoYYgTj3cveL4BRXjIjzwMEI1qbzlzTHJ:kJD8wQSsoYY0sM+RNR3p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d7a862a5c9adb2db79e920413319744
Files
-
8d7a862a5c9adb2db79e920413319744.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 318KB - Virtual size: 317KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 242KB - Virtual size: 241KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ