Static task
static1
Behavioral task
behavioral1
Sample
8f7c6a6c437fdd8d9a718dd3af68065f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8f7c6a6c437fdd8d9a718dd3af68065f.exe
Resource
win10v2004-20231215-en
General
-
Target
8f7c6a6c437fdd8d9a718dd3af68065f
-
Size
488KB
-
MD5
8f7c6a6c437fdd8d9a718dd3af68065f
-
SHA1
14dd9c888f9e46964c394323b1490af687d8ac20
-
SHA256
0a4fda01d5bb8e2ee08dc22ac3d301f3e7b59c99907f590b5a7b24180d776758
-
SHA512
e2007157e13fb9456b334dfa61961c2b7896d4d5ad494881adafbe3db67eea18d70b045181909fb29cae9a7d60b5198f2e2631e64ed67f117c7c17930e327334
-
SSDEEP
12288:gEWNAYUdHN3Smomluo/mU61Xi6/bxvynWv:2qY2oCuo/m91S6/RyWv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f7c6a6c437fdd8d9a718dd3af68065f
Files
-
8f7c6a6c437fdd8d9a718dd3af68065f.exe windows:4 windows x86 arch:x86
dd74c2247d3141492674beb43885bf30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlTraceDatabaseValidate
RtlDefaultNpAcl
kernel32
GetSystemDefaultLCID
user32
GetInputDesktop
GetClipboardOwner
Sections
.text Size: 482KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE