Static task
static1
Behavioral task
behavioral1
Sample
8d504e4e095bad48035aaa7b5c415859.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8d504e4e095bad48035aaa7b5c415859.exe
Resource
win10v2004-20231215-en
General
-
Target
8d504e4e095bad48035aaa7b5c415859
-
Size
3.1MB
-
MD5
8d504e4e095bad48035aaa7b5c415859
-
SHA1
ce1e2163a9f1e879368fbafc64d75d6c1e8da1a3
-
SHA256
e71e5992db9618a3e53940a421b676d4a191100562051301c53cec3290a67a1a
-
SHA512
84a45a0a24a2791b3dda07c8b1a02fd8680d40b2c2ea787f607279205aaac914660110b37009ae58ecc34489b630e886d63843ddf01ddb82d5e9ce20e6984689
-
SSDEEP
49152:Z2rWkTInZ76EfkqZ27fcHKec3XhTakAgQ/Lh+4r+LZ+5jG:QqkTfkkqZIq4AgkULZ+Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d504e4e095bad48035aaa7b5c415859
Files
-
8d504e4e095bad48035aaa7b5c415859.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 530KB - Virtual size: 529KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 122KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 683KB - Virtual size: 682KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ