History.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8afd60f7ef24ac692068525fb3c91e74c60c066dff1f778db851ecc7b691f0bb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8afd60f7ef24ac692068525fb3c91e74c60c066dff1f778db851ecc7b691f0bb.exe
Resource
win10v2004-20231215-en
General
-
Target
8afd60f7ef24ac692068525fb3c91e74c60c066dff1f778db851ecc7b691f0bb
-
Size
1023KB
-
MD5
b62d67f96c1a058130ea48ae305c9fc6
-
SHA1
dd397eb2001b52849019004ad84d7e4596f7efe7
-
SHA256
8afd60f7ef24ac692068525fb3c91e74c60c066dff1f778db851ecc7b691f0bb
-
SHA512
906f957876bd9e6030a0246a38056506696043ea1fb333edd59d28296e81ab693d88c92bbe6022e00aabbfc138df089eef4b536270c1838008986f8b915a3fc2
-
SSDEEP
24576:FZRZUNgFTBxIg/eB6RSouoxAeDCCmlg6dmAYvfgCVMvRj:cGFNWXySq1GDlgKDv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8afd60f7ef24ac692068525fb3c91e74c60c066dff1f778db851ecc7b691f0bb
Files
-
8afd60f7ef24ac692068525fb3c91e74c60c066dff1f778db851ecc7b691f0bb.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1021KB - Virtual size: 1020KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ