Static task
static1
Behavioral task
behavioral1
Sample
8ea21b1fbcf0866af8f9cfb8ac5f793f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8ea21b1fbcf0866af8f9cfb8ac5f793f.exe
Resource
win10v2004-20231215-en
General
-
Target
8ea21b1fbcf0866af8f9cfb8ac5f793f
-
Size
365KB
-
MD5
8ea21b1fbcf0866af8f9cfb8ac5f793f
-
SHA1
1d25ba5c15c7001f8c8698d94339bf8d34ab5198
-
SHA256
871f3801763fb8a7b882008ad726974b14d4498d42b2273e143734ba4dcfab4e
-
SHA512
61e43a55e343f4b23c3c361ccb3796b7ddb1d0cefe4bb49fba0a005070642170502625a54f4ba61bc0fa70c4a31f0e3af784d9121b6c8b117e8aa9dda3de1837
-
SSDEEP
6144:RUgCtb0fpX0xcBjeYj5p3JdoqOsQusLpzUhtepPa6ktpsZIx8su1X9RN96aPE2zC:RU3FI0xsXj3J/EeYdAsDZ9RNI7SoS1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ea21b1fbcf0866af8f9cfb8ac5f793f
Files
-
8ea21b1fbcf0866af8f9cfb8ac5f793f.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
���0 Size: - Virtual size: 388KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���1 Size: 349KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE