Static task
static1
Behavioral task
behavioral1
Sample
8efe02b82df7f9402509e501c855496d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8efe02b82df7f9402509e501c855496d.exe
Resource
win10v2004-20231215-en
General
-
Target
8efe02b82df7f9402509e501c855496d
-
Size
816KB
-
MD5
8efe02b82df7f9402509e501c855496d
-
SHA1
b1f82cc71cbd23c3492bcbd5f05bf46704318363
-
SHA256
380699ada7b989f4a6447bc84f9d398679b8db4e193ac5126b8cc0b4b5e9c928
-
SHA512
ae09148aff999c1a9f200f8985e21255d72f2a2e9cefc6d1f3e417d573eb1f7180b4cc51583e660487c4c68eeb1e52a74aa4a5c5d556eeb847dfde9059785156
-
SSDEEP
12288:Z1SBtkT9hYnz8dPJ3MRb3czYobTmOP0ghgu8f03grzWquR6CTgZdGHt:GtkT9enz8dPROkbbTF0NvrLuWZ8Ht
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8efe02b82df7f9402509e501c855496d
Files
-
8efe02b82df7f9402509e501c855496d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 226KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text1 Size: 264KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 52KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 44KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc1 Size: 20KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 400KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE