Static task
static1
Behavioral task
behavioral1
Sample
8c6cb37351376ea666334f12e756e917.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8c6cb37351376ea666334f12e756e917.exe
Resource
win10v2004-20231215-en
General
-
Target
8c6cb37351376ea666334f12e756e917
-
Size
2.6MB
-
MD5
8c6cb37351376ea666334f12e756e917
-
SHA1
644e81bbb3ac2484c27fe2d07888b70489790668
-
SHA256
dd8ac247c025c0f730b0d31195972f27252c61137e85988d89a0f40ccee84437
-
SHA512
bdec4e051a355dad4fe3a309bd81fab9a194da154517b3a8e2d0ed4364f6d80bf54c508598887173f651b59b3b57bb1707f9d7362fa3f480849d0b926b82af12
-
SSDEEP
49152:CqQeU3+34Kj3E7Z1Ih7SUeXzrD0UPoS+UquvCCx10b:xd9IWEFm7SUar7PoSjsCi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c6cb37351376ea666334f12e756e917
Files
-
8c6cb37351376ea666334f12e756e917.exe windows:5 windows x86 arch:x86
7784ad6e3a5ea0c8d344c4f7fd1cdc3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32 iphlpapi
GetCommandLineA �":
Sections
.text Size: 1.8MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yc Size: 764KB - Virtual size: 764KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ