Static task
static1
Behavioral task
behavioral1
Sample
8b502f79728ca015374cab179c6c41fa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b502f79728ca015374cab179c6c41fa.exe
Resource
win10v2004-20231222-en
General
-
Target
8b502f79728ca015374cab179c6c41fa
-
Size
684KB
-
MD5
8b502f79728ca015374cab179c6c41fa
-
SHA1
c62f5210a8aea608493d9db1f6b7cdc43105d801
-
SHA256
75c0a8c3146a81e0602271a29af6ddbd2be0da6ed0a7ab9d0d06215a4749d398
-
SHA512
7a8a375c2bd77f189ff6da27d11263c7bd097eadbe03946869d77365b88fea136a623a161ce93fef337924f95186f3e20d34dd9492ed234106c0913aefd8abe8
-
SSDEEP
6144:0J82asJfnlAJwT71w+DtmVlTWw8oY4JHfTcE6sTNrCMHJeTBh+:0OWJ8wT7SoScCY4JHLcElTNm8eT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b502f79728ca015374cab179c6c41fa
Files
-
8b502f79728ca015374cab179c6c41fa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 352KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l2 Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ