Static task
static1
Behavioral task
behavioral1
Sample
8da69a6fd3bb325a293cce8f2bc18caa.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8da69a6fd3bb325a293cce8f2bc18caa.exe
Resource
win10v2004-20231222-en
General
-
Target
8da69a6fd3bb325a293cce8f2bc18caa
-
Size
9.5MB
-
MD5
8da69a6fd3bb325a293cce8f2bc18caa
-
SHA1
8e8b26da08b2bafaa1dbe634e01b6706aab3321a
-
SHA256
7846f29c825b4ac38d43ebbb14161598aa878255e44032cc4c11f31908cb652b
-
SHA512
c23768f2f0cdad1bab387e8fffc797e3406934a0e073c791081ccadc4ae464d2324253e154e85c54b8579a08cd96ca83d55ffd8953cc0e5b6f22465dae163796
-
SSDEEP
196608:j55NG/Fz+21zJRRS1xLgoCXRlP3WgDkSN+8pX7FRytfs8adnxHSn:jN0+2RRS5q/Dbj7+tfs1xs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8da69a6fd3bb325a293cce8f2bc18caa
Files
-
8da69a6fd3bb325a293cce8f2bc18caa.exe windows:5 windows x86 arch:x86
a6ecbcc50b08a3e94567fe0036370f8c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetThreadExecutionState
FlushViewOfFile
IsBadCodePtr
lstrlenW
GetHandleInformation
GetProcAddress
GetModuleHandleA
EnumDateFormatsW
GetCurrentThreadId
GetCurrentProcessId
ResetWriteWatch
ntdll
RtlAddVectoredExceptionHandler
RtlRemoveVectoredExceptionHandler
Sections
g Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
W Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
g Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
g Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
g Size: 2KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
5Eu Size: 130KB - Virtual size: 128KB
IMAGE_SCN_MEM_READ
fdM Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1gP Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TtP Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dLy Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jNX Size: 14KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ