Static task
static1
Behavioral task
behavioral1
Sample
8bfde171db00c1e0138a0126cced9a2a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8bfde171db00c1e0138a0126cced9a2a.exe
Resource
win10v2004-20231215-en
General
-
Target
8bfde171db00c1e0138a0126cced9a2a
-
Size
360KB
-
MD5
8bfde171db00c1e0138a0126cced9a2a
-
SHA1
afe12d3001008bec02511a8ee2db17fa8d15cae1
-
SHA256
d9d6b2271ad66ca1ef859abe1204e6ef9419109c1c56216d9ed91384f9ccc61b
-
SHA512
c0f7461b683c0d5a274936c8a31347048912b4c124afefb89984ecbae5bd5f91dc577b2aa04153675120566df8044e43c76e5a3c3136ac935c287883e40e2919
-
SSDEEP
6144:+urpOA5MIg2MmDyqj9OYDL1HiIPBMvgqgF8XW4b:+ur3gRmzZVX86avEF8Jb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bfde171db00c1e0138a0126cced9a2a
Files
-
8bfde171db00c1e0138a0126cced9a2a.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ