Static task
static1
Behavioral task
behavioral1
Sample
8f784650794248a55dc085540298d068.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8f784650794248a55dc085540298d068.exe
Resource
win10v2004-20231215-en
General
-
Target
8f784650794248a55dc085540298d068
-
Size
52KB
-
MD5
8f784650794248a55dc085540298d068
-
SHA1
7e9038ce30f474765afd8e7c466aa6480dd7c7cc
-
SHA256
39a1e43ac0ca3625e5143dd9218f5cc8dc0a5e74bef48ee94eb023d33339e54b
-
SHA512
7862f10ca5ee406035f3693bbab3c4b092d7957d00f8eba16098fdf3142b41041cb13db967ec1371e987c594bb1bc166ae6171b9b51caadd05aee89cd66c5400
-
SSDEEP
768:tTnTyORV9RaGK/pFT4PtXxuApUPY3UpquM9Gf/bR/DQ/DD/D52/jS/H9M/VY/yiG:hTyOBRJei3GPXvf/d/DQ/DD/D5l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f784650794248a55dc085540298d068
Files
-
8f784650794248a55dc085540298d068.exe windows:4 windows x86 arch:x86
aa6bad5b0bfecf9f9c8257e864d67fb7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
Sections
FPCrypt Size: 29KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
FPCrypt Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ