Static task
static1
Behavioral task
behavioral1
Sample
8a9b58dda00b9d042b64f9ac6f3984daacb2ee7336c5ca25a363f84f3b0082b4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8a9b58dda00b9d042b64f9ac6f3984daacb2ee7336c5ca25a363f84f3b0082b4.exe
Resource
win10v2004-20231222-en
General
-
Target
8a9b58dda00b9d042b64f9ac6f3984daacb2ee7336c5ca25a363f84f3b0082b4.exe
-
Size
53KB
-
MD5
141d3929774d61692a2e7e131fb9d1f0
-
SHA1
5ce4b97e883c22b1821b83218b83e90385f8b079
-
SHA256
8a9b58dda00b9d042b64f9ac6f3984daacb2ee7336c5ca25a363f84f3b0082b4
-
SHA512
1770bb9f0cf2223fa8911e1035bf15775ee067a7cddb3766502ddb24369d3c22fcba78cbc97454de248fe047536ac1b459b14117f9fffe6dc68abf4d98677e97
-
SSDEEP
768:h5DN+HMK88L9O+B9oArLiVz0bcHBbM4KElNm2Y6ejiaV7FPEHh51zF3CQ55ZwKw:hrrrH53FY65Hh5hFf55ZwKw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a9b58dda00b9d042b64f9ac6f3984daacb2ee7336c5ca25a363f84f3b0082b4.exe
Files
-
8a9b58dda00b9d042b64f9ac6f3984daacb2ee7336c5ca25a363f84f3b0082b4.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ