Static task
static1
Behavioral task
behavioral1
Sample
8b10932ba81f41561ea62ff3e0426a17.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b10932ba81f41561ea62ff3e0426a17.exe
Resource
win10v2004-20231222-en
General
-
Target
8b10932ba81f41561ea62ff3e0426a17
-
Size
64KB
-
MD5
8b10932ba81f41561ea62ff3e0426a17
-
SHA1
2b392dc442dd25f78c00a4c85ce3281bea800771
-
SHA256
4739dc6d1085470eb12127b0668518fa396f9c373c06a4e20987a5951b1daa4e
-
SHA512
6f06032c8e2eabb655ae9bceab8a25500e580002a4409c42f8e315e0c833d3bb9bb515d979c2ee30782a94740d0fff8061858c521fdc82402779bcebda8c3f37
-
SSDEEP
768:dNza34CRntHPwOJFSFsIZRJSlS7bzHpEvvrQ+ExiOJBQVCzD:HzaxZJFSFsIUabzkREQOJKVC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b10932ba81f41561ea62ff3e0426a17
Files
-
8b10932ba81f41561ea62ff3e0426a17.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
unpacked Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
unpacked Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
unpacked Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.snaker Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HaoTian Size: 512B - Virtual size: 520B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE