Static task
static1
Behavioral task
behavioral1
Sample
8fa766db56dd6633bc585dc17e2324bf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8fa766db56dd6633bc585dc17e2324bf.exe
Resource
win10v2004-20231222-en
General
-
Target
8fa766db56dd6633bc585dc17e2324bf
-
Size
110KB
-
MD5
8fa766db56dd6633bc585dc17e2324bf
-
SHA1
f393e696784fb6839e0d2e19c7620b38263c150b
-
SHA256
0c44df0b9f089ade61767c549533e03b41bb194f204a2d2f6c36184f2a6ec0d6
-
SHA512
037e744aecbf94ce3dbf61b1ec37b08e7173c63349ead8026c53977410cb1636a638ed07b2ec45b61f384c2654010a8bcf2c803c398e4e3f5cf5a7628374d1b2
-
SSDEEP
3072:P64DgliRPaI54VCWzEcUdJ4up/iYBvrUrZG:y40liRt5ylgJJ9DtGw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8fa766db56dd6633bc585dc17e2324bf
Files
-
8fa766db56dd6633bc585dc17e2324bf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 3KB - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE