Static task
static1
Behavioral task
behavioral1
Sample
8f5eb8d4cf78bba95d9fe0ca652d30f2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8f5eb8d4cf78bba95d9fe0ca652d30f2.exe
Resource
win10v2004-20231222-en
General
-
Target
8f5eb8d4cf78bba95d9fe0ca652d30f2
-
Size
164KB
-
MD5
8f5eb8d4cf78bba95d9fe0ca652d30f2
-
SHA1
389fec0ec652305bc1fe37f6d69fdb7645b97421
-
SHA256
3f6961ef0aed19fc15ee5e11cac168ff4536312c7daab8d0236d4f3866a2f468
-
SHA512
34e3c533c25521092f48617481d0077ee64b4e2c0d309295ab8e89e898e9ed0c6ee289e3475c7f44ba82599d2c11331e5615c7b10b628942513260a9b713171e
-
SSDEEP
3072:VrgwkijCWXvjprgCVJREqyrWIfLFTP+VAGTKWFOns5DVd:tgwkACWXlsWDS3oVAGeoJd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f5eb8d4cf78bba95d9fe0ca652d30f2
Files
-
8f5eb8d4cf78bba95d9fe0ca652d30f2.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
Sections
LKBL10 Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SyjF Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
arvTJ4 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vK Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hLupeM Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE