Static task
static1
Behavioral task
behavioral1
Sample
8b2fcf09fc3a428d1ceb859db55a2d99.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b2fcf09fc3a428d1ceb859db55a2d99.exe
Resource
win10v2004-20231215-en
General
-
Target
8b2fcf09fc3a428d1ceb859db55a2d99
-
Size
24KB
-
MD5
8b2fcf09fc3a428d1ceb859db55a2d99
-
SHA1
59968d9e4aa4e7699174b3cbf295f2b382ee6704
-
SHA256
e90e36010fe2332e4e6554d442731613f1d9358edbee1c7d196e25c88aec5999
-
SHA512
d460c617a1e06198c4453acc5d11ae9fe3346d1e1b298ee52c689711aabb77f9c0c9b4457f0aafa95f3405b586b499c3e8cc28ec38cd0a33fe19bdda32ac9667
-
SSDEEP
768:MGtt1g+eNPhkGrwoxSOcThYOmW+xumYxWm+2:MGtt1g+gkowoxTcmO1+xujWM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b2fcf09fc3a428d1ceb859db55a2d99
Files
-
8b2fcf09fc3a428d1ceb859db55a2d99.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 169KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tlss Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 1024B - Virtual size: 670B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ