Static task
static1
Behavioral task
behavioral1
Sample
8f963244491b2b67c9135779e015b4e0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8f963244491b2b67c9135779e015b4e0.exe
Resource
win10v2004-20231215-en
General
-
Target
8f963244491b2b67c9135779e015b4e0
-
Size
1.3MB
-
MD5
8f963244491b2b67c9135779e015b4e0
-
SHA1
ceabadde61be9cc5994b7d11beac0ca1f5738b39
-
SHA256
4a318857ecc22d476ed391b838a1d5bc28ab7615851ee374fd61006c4517d689
-
SHA512
841929921bfb624c5725f2a0170ea4af41c88a228c268644c57a8e3fed54fd333152562f162d6bd6bd1a5c84694ecb03bff10f1cf0ac5cf6fc5b82b98b4d9793
-
SSDEEP
24576:RKI8g6DQTVg5u+BQyyTDvWo4HY9DDfURZYo3WMyMjnJ8zX6yZSp/zPA8NEyGajmK:RKI8g6DQTW1QyyvvWoCFnYQWMznP2Mzf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f963244491b2b67c9135779e015b4e0
Files
-
8f963244491b2b67c9135779e015b4e0.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 188KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ayjymemk Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rtwkabpm Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE