Static task
static1
Behavioral task
behavioral1
Sample
8de32b1db64333ec24c658508723808a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8de32b1db64333ec24c658508723808a.exe
Resource
win10v2004-20231215-en
General
-
Target
8de32b1db64333ec24c658508723808a
-
Size
210KB
-
MD5
8de32b1db64333ec24c658508723808a
-
SHA1
6012d9b00fe593a628fd28ed9135921d87558e2c
-
SHA256
32a4e0c50625750a5476cf7e4ee963c60533f8f15941e6741a798382328c6667
-
SHA512
56991b62da160003a05e156627b8fe2c653f89e6cf715876ea5897be2969010eedd2be89c4d5ac6eb4954832bed0a49279b209046f66de820995190e4de4032b
-
SSDEEP
6144:QXiHfwvSh2h8CHWbRmHeRhY489MMr8tF2tF:ILR2wH6hNiMAv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8de32b1db64333ec24c658508723808a
Files
-
8de32b1db64333ec24c658508723808a.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 207KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ