Static task
static1
Behavioral task
behavioral1
Sample
8f6aaf96c74c82798d00b9bc903fe445.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8f6aaf96c74c82798d00b9bc903fe445.exe
Resource
win10v2004-20231215-en
General
-
Target
8f6aaf96c74c82798d00b9bc903fe445
-
Size
1.1MB
-
MD5
8f6aaf96c74c82798d00b9bc903fe445
-
SHA1
4d379b5605fed00c886e48631656d95b8b7e004b
-
SHA256
10fdadca6d9b022994c55a29905ff13ff3ed569aed93d627290e3247bb220e5a
-
SHA512
a5e3c18e732002bb880f552b6d29f239a5a6837e45dd33dfc00b5b8f1db74ba6be5483014ee33b3295a7a7f1ccfa05573dd4d81ea17f0bed25cb868c1e20f48b
-
SSDEEP
24576:dBJwpRQMCVMDkcgIy5GSYrgGmS/h5cAf5RXI0yfkkkzquq/IwsCgL4s:dByRZRkhIsGS0Hfjxc8kkmjIXCsB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f6aaf96c74c82798d00b9bc903fe445
Files
-
8f6aaf96c74c82798d00b9bc903fe445.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.1MB - Virtual size: 15.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yC Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE