setup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8c080e4eaadff6076a4909af38f14543.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8c080e4eaadff6076a4909af38f14543.exe
Resource
win10v2004-20231215-en
General
-
Target
8c080e4eaadff6076a4909af38f14543
-
Size
1.1MB
-
MD5
8c080e4eaadff6076a4909af38f14543
-
SHA1
9e653f9b05144815d9c79bcfe7889eeb3a7ecab2
-
SHA256
92c8f5e5d72b0c1bfb19254ceae9368b96a9e4c8c9440319c9477b8b6a96b5d5
-
SHA512
a80c4dced826860c88ff4d57e3e175747b4a411a4163b99241977c02f114d66a57e57cae151f843e8452e73ce54333389efdfdcca7ff3540ac9143a2937d98f0
-
SSDEEP
12288:8n4q8ZkNhTTywJ5FOiJeDuUlcn7uswzR1Z96nIb:8RTffJh5SnX6Ib
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c080e4eaadff6076a4909af38f14543
Files
-
8c080e4eaadff6076a4909af38f14543.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 586KB - Virtual size: 586KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.uro Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE