Static task
static1
Behavioral task
behavioral1
Sample
8eeb42971f90df5ee42a327e76ce6388.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8eeb42971f90df5ee42a327e76ce6388.exe
Resource
win10v2004-20231215-en
General
-
Target
8eeb42971f90df5ee42a327e76ce6388
-
Size
512KB
-
MD5
8eeb42971f90df5ee42a327e76ce6388
-
SHA1
36a4904b5dd7450cd9a3569fc5376520d1919a89
-
SHA256
4d780d78c06b8eb438481107ba85d3543fc2ae23e704359d16eb939ce3dad7ff
-
SHA512
e94b66ebd937f1191d51a5d6bea0b1e8ccb4b65f3727d56e4ad9fb0cdda575e6eb3943f687acdafa2665f4e5622e68acff726eed2a33417779daf325189101c6
-
SSDEEP
12288:1eDscyvl5A4RmE1ZH3lMhgZR8feH8OOXz:1oPyv7DmSP82HFOXz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8eeb42971f90df5ee42a327e76ce6388
Files
-
8eeb42971f90df5ee42a327e76ce6388.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 805KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 247B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE