Static task
static1
Behavioral task
behavioral1
Sample
8de27ce299613bcd4416f35df8d61d70.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8de27ce299613bcd4416f35df8d61d70.exe
Resource
win10v2004-20231215-en
General
-
Target
8de27ce299613bcd4416f35df8d61d70
-
Size
562KB
-
MD5
8de27ce299613bcd4416f35df8d61d70
-
SHA1
2682e42d6aed9c9065d8b00ea9ef1d00073cdb97
-
SHA256
53c69b820dcce5b50c67d70cdf843eb3be689101ff6366374c64cb27c3606718
-
SHA512
8f1829e5945e924ba9cda8fb359484d78ced3a084f50eb247f7fa3ad5755baa62e0bc28a137ebc7b079b4c39f26c386deb4b060bce820e833bf1c392560badf5
-
SSDEEP
12288:/YSj5OIUHkZv2QBE8snXouyAGby4Vl9nrFsVhe:/jj5OI+CE8snX/cyO9rqe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8de27ce299613bcd4416f35df8d61d70
Files
-
8de27ce299613bcd4416f35df8d61d70.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 356B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 232KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE