Static task
static1
Behavioral task
behavioral1
Sample
8e36190e5f7e6ed27c6c3c2819f5cbbd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8e36190e5f7e6ed27c6c3c2819f5cbbd.exe
Resource
win10v2004-20231215-en
General
-
Target
8e36190e5f7e6ed27c6c3c2819f5cbbd
-
Size
64KB
-
MD5
8e36190e5f7e6ed27c6c3c2819f5cbbd
-
SHA1
c4a3a141f621ef720e3de9a92ee7df3a96de595f
-
SHA256
13be4a21c1c91fe84a3c0530aab484fd75ee4a0163f418dc1857b8d00a94d885
-
SHA512
6660fe533ab5decefa542890f2d39d72d6dc97a8604f363d7a021ab88899b13c83cba84b4bee8176f3c2d810f42343a889eea75d50031d78f8aac7c84f4761b6
-
SSDEEP
768:2EjRS/4xRiYlq1aruY2OVVoaVJx5frPU1io1yfU6fLN2O5wBACOl8Qfd/Zf3Yucx:27q2OoCTcio1ydfp3ivOlJfd/x3Y3H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e36190e5f7e6ed27c6c3c2819f5cbbd
Files
-
8e36190e5f7e6ed27c6c3c2819f5cbbd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.0MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE