Static task
static1
Behavioral task
behavioral1
Sample
8b8fe8389319a5660921ed2d61dd3d0a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b8fe8389319a5660921ed2d61dd3d0a.exe
Resource
win10v2004-20231215-en
General
-
Target
8b8fe8389319a5660921ed2d61dd3d0a
-
Size
8KB
-
MD5
8b8fe8389319a5660921ed2d61dd3d0a
-
SHA1
329f6225d561c385ce88de94819f390e6713565c
-
SHA256
bd25e4a6f5237a8ad3d0c0e364ade0d5347fcd332c5528a3dc70a0ee88ac2298
-
SHA512
c34325c8fe61a89fadcd93a9d17ac361c5a6b01d4abef57fe460d10780b3b80e80feef311b53bae9c6daa29b6814b6dbc24d2df2a38e20c3b3cccf8e34cd2de0
-
SSDEEP
96:nPFJBcnkLAU9mUqQ+5yHion6gZvTwfbOUY:ndJSY9d+asw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b8fe8389319a5660921ed2d61dd3d0a
Files
-
8b8fe8389319a5660921ed2d61dd3d0a.exe windows:1 windows x86 arch:x86
aa25bf63b57873c47f41aaf139fee93b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ExitProcess
GetProcAddress
GetModuleHandleA
user32
MessageBoxA
Sections
CODE Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ