Static task
static1
Behavioral task
behavioral1
Sample
8f4e58ffbbaa1b4387f9d73758d602e5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8f4e58ffbbaa1b4387f9d73758d602e5.exe
Resource
win10v2004-20231215-en
General
-
Target
8f4e58ffbbaa1b4387f9d73758d602e5
-
Size
128KB
-
MD5
8f4e58ffbbaa1b4387f9d73758d602e5
-
SHA1
b7df20a43758ae6f1a3d2d2e1489091dbb4b899b
-
SHA256
d88f4312914b74008a5f85788eaa7e1cf268a92c0c0689fec1beeeeb56050285
-
SHA512
28dace05772ee5b4e93367ab8082e11a11a303cc59f6e9949482a028998115357cb805997d9bc0e9cc5a09b6a4375b65df589c89a688477a4964744c2045e799
-
SSDEEP
3072:U4wQ22S/9O55cEZZY9e/lUcTbl/LALZQv+LG36elik:U7r/9CjcWK6/aK62
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f4e58ffbbaa1b4387f9d73758d602e5
Files
-
8f4e58ffbbaa1b4387f9d73758d602e5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
sfziiko Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lnsw Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
re Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE