Static task
static1
Behavioral task
behavioral1
Sample
8eff624a31173213765ec6cc6472c34a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8eff624a31173213765ec6cc6472c34a.exe
Resource
win10v2004-20231222-en
General
-
Target
8eff624a31173213765ec6cc6472c34a
-
Size
100KB
-
MD5
8eff624a31173213765ec6cc6472c34a
-
SHA1
a2dcc1a4d67e3fb0d357a36043e818d28a51b318
-
SHA256
8cb33bb9cfd1ae27bbc04936107720531b733db42afc49d0cc67e0078e84dfff
-
SHA512
66fa51c04e91b02a2a1d0a4d79ab7d233209ad9fee164232cda5c443ffb7084f556a3b4a7a1828e1b9fa4c88df867698e2fe1c7a63362f96adb95f61348ad4bd
-
SSDEEP
1536:cVy4mq9N4+8r2XBsdypFBCduZ9zyRr1xzRB1uZ44pO9KB0H1luvcO2XBsy:BvMN4+FBsAdur1xFvF4pO9KB0GvqBsy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8eff624a31173213765ec6cc6472c34a
Files
-
8eff624a31173213765ec6cc6472c34a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ipu Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
e Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hugr Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE