Static task
static1
Behavioral task
behavioral1
Sample
8e79069f674771f1ee7fb148b27dec31.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8e79069f674771f1ee7fb148b27dec31.exe
Resource
win10v2004-20231215-en
General
-
Target
8e79069f674771f1ee7fb148b27dec31
-
Size
24KB
-
MD5
8e79069f674771f1ee7fb148b27dec31
-
SHA1
9197f92663415d03641aad4cf2d749a2d96f138a
-
SHA256
1f61a5cb4a6569ff428ba987db96641d6f3e3e4bef2e403b0a92dc7cd41d5a84
-
SHA512
7fd58e3fe743d8d1ff8aeee652e05840437f017001f1e2392a2735fbf4757ab4a8fde5ca2176bed27ab12526e7c357a100137bd049e8cbf6c9eb00c252d8c3fa
-
SSDEEP
384:V4riZJRU8toVN1G0fnyn7780/aUw6uReRMGNVycpbDSZMtN6dLvelmD30:jltCNI0fO78wPvuReRMGGcpKMlME
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e79069f674771f1ee7fb148b27dec31
Files
-
8e79069f674771f1ee7fb148b27dec31.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 20KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE