Static task
static1
Behavioral task
behavioral1
Sample
8ec2afa9b108acebf01062490b3904e6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8ec2afa9b108acebf01062490b3904e6.exe
Resource
win10v2004-20231222-en
General
-
Target
8ec2afa9b108acebf01062490b3904e6
-
Size
47KB
-
MD5
8ec2afa9b108acebf01062490b3904e6
-
SHA1
1007fd87e1f5b3193cd9526352745d146809b26a
-
SHA256
e4d3f53c2c32b93309ac4992e27380675c04a76866c91d1fce23f61508714b59
-
SHA512
30be1d103cc8341d19ecbb64a722c76d86e8b39bfe6a2f316af62b71a899e3addc4b4794cdf260e31b176633921c0378d8e74755e949958e46df20d4a0171ea2
-
SSDEEP
768:Xc30Smx0P8UOcLNPI8JqGThI5CKCQQ0gSK5sel0wH8nLxoUUIMLae4P/ozCH:Xc30rCLNmCHQQ0gRsw0wcLxoge4P/ozE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ec2afa9b108acebf01062490b3904e6
Files
-
8ec2afa9b108acebf01062490b3904e6.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 17KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE