Static task
static1
Behavioral task
behavioral1
Sample
8c4db3089f0c6a1a8b4596ba3acb060f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8c4db3089f0c6a1a8b4596ba3acb060f.exe
Resource
win10v2004-20231222-en
General
-
Target
8c4db3089f0c6a1a8b4596ba3acb060f
-
Size
74KB
-
MD5
8c4db3089f0c6a1a8b4596ba3acb060f
-
SHA1
c1cea387ede3ecc70a3f9a42d1b368d232b71a2c
-
SHA256
f8ab8607c770070833746f02b63930f23a2b764ce7d4ba81da4a01d804bebd5c
-
SHA512
9a70e07530900ec31283a562f7c888dfcc10d39a428ff944f45744c5ce9a4808a7aab68f2e5eb1594d2dde82ee7c4e76094cee46820cfb6c339c1a3352766f0e
-
SSDEEP
1536:+Cf4SGLuBE5yXol3ReyMock29YJigOtfg8TcxDA9:+Cf4SGLumsYlBtqkXig69cxDe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c4db3089f0c6a1a8b4596ba3acb060f
Files
-
8c4db3089f0c6a1a8b4596ba3acb060f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22.6MB - Virtual size: 22.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ