Static task
static1
Behavioral task
behavioral1
Sample
8bb957ea6d14a5247c6be140d7e33939.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8bb957ea6d14a5247c6be140d7e33939.exe
Resource
win10v2004-20231222-en
General
-
Target
8bb957ea6d14a5247c6be140d7e33939
-
Size
337KB
-
MD5
8bb957ea6d14a5247c6be140d7e33939
-
SHA1
bcd0fa29ed6776b832b0da02b6b457868601e158
-
SHA256
f867b57ef930a4241206093cbcda84d20fac407377670ab3904ed077abf05179
-
SHA512
3790cf335d36c04680264593141b00f5456263692039a7c490424065995c9edad5a0b54760259c8758797ed2ff697c006a4e4e16c71b56c8e4f1b9985c1576bc
-
SSDEEP
6144:a7AuAKJ5KR/aqLSldNUPeDqH6qDghMpr5tJmMCgqzC+H+SRd18oFYqZ:aRAK/k2ld+KqlHWtDH+SRd18UlZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bb957ea6d14a5247c6be140d7e33939
Files
-
8bb957ea6d14a5247c6be140d7e33939.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.clab Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec1 Size: 316KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.peco Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE