Static task
static1
Behavioral task
behavioral1
Sample
8e3b8fcaa8f49ba25c30aeb17d6820e7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8e3b8fcaa8f49ba25c30aeb17d6820e7.exe
Resource
win10v2004-20231215-en
General
-
Target
8e3b8fcaa8f49ba25c30aeb17d6820e7
-
Size
68KB
-
MD5
8e3b8fcaa8f49ba25c30aeb17d6820e7
-
SHA1
5d21c18ad9ec4d14b9aeced746e7234de6bc8fd9
-
SHA256
61722e104012cc1c7767253477ca2ca6329e568af4b4d52c6d696504bd3f5ec8
-
SHA512
34235ef29e8ebee2f39c126803786bb90eba69a0b932cefb11073be3a8a4f439e9c769d243e4fc18172af176b3e16691b68072d176bccbe8ecf3af404cf0c1c3
-
SSDEEP
768:tkrxtLjV66LqtRu/HVOhR1lRhUAdXcgtlyVobMyN6LaGFMl9KUDDDZ8hLTb7Lr:s5jV2tRuI8qw7m+M3KUt8tTn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e3b8fcaa8f49ba25c30aeb17d6820e7
Files
-
8e3b8fcaa8f49ba25c30aeb17d6820e7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ