Static task
static1
Behavioral task
behavioral1
Sample
8fb2f031967b4205c36828a6121cfff4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8fb2f031967b4205c36828a6121cfff4.exe
Resource
win10v2004-20231215-en
General
-
Target
8fb2f031967b4205c36828a6121cfff4
-
Size
436KB
-
MD5
8fb2f031967b4205c36828a6121cfff4
-
SHA1
890d43a3da44ee691d56da854b6c21c8b752965e
-
SHA256
fa4f74653f375b766c3040ad1da595d511ee39767619ecb4c0a466d292ba735a
-
SHA512
88a4017b27736b145d856b8658823407fc1a9435ef7a75f8d2ef7097a11ab1307ef644dfacb8218a89ed94e5af3aaad0b04f284af2f00efcd895f3d5f380904c
-
SSDEEP
6144:sRu4fBuUlNOkfddQqLVzpUGE+Hy0pdTQQ8+P6Z6eDUFg61:sRJuUBddQqLVz4+Hy0puQvM6xg61
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8fb2f031967b4205c36828a6121cfff4
Files
-
8fb2f031967b4205c36828a6121cfff4.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 262KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ