Static task
static1
Behavioral task
behavioral1
Sample
8af1a490211549c7b9d624159f243d01.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8af1a490211549c7b9d624159f243d01.exe
Resource
win10v2004-20231215-en
General
-
Target
8af1a490211549c7b9d624159f243d01
-
Size
113KB
-
MD5
8af1a490211549c7b9d624159f243d01
-
SHA1
2351b06cc9d7fe5e25c33bc2397eeb5c398ef40f
-
SHA256
ad2f81a974d335a814888ec94f42d27118970194a5cdb54740e442ab248ea355
-
SHA512
ba8d455b625b61874ef304df6fdba26272cf8a63a6194ad088de225d10df5ad1bd12669a23d2bda740d77d31b8a512be32865b3bd8c333b56b05c084fbb65c20
-
SSDEEP
3072:f/yOSjQifimM9jmDKTEEe4c3+rFfZMZqCc:CdlNOTEh0rFSZqX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8af1a490211549c7b9d624159f243d01
Files
-
8af1a490211549c7b9d624159f243d01.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE