Static task
static1
Behavioral task
behavioral1
Sample
80000_1000.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
80000_1000.exe
Resource
win10v2004-20240221-en
General
-
Target
a0f0cdf8c5840cfbbbee71752541e5df
-
Size
48KB
-
MD5
a0f0cdf8c5840cfbbbee71752541e5df
-
SHA1
966a152c128c720dd02bda6205bda8f9b0230ccf
-
SHA256
a8f9be7113e07bca76ecc9ece93a0fb6e30d36e27a85d48f7b7733f149605d8d
-
SHA512
a06a52220ba4d6e06a278bbae6954d98a4a907925855eaaab55fa7a41b40a9f9453b71f09f4cc03cf430e9620bf1ccd9b09dbc65b08e3778e62b27c9b6bb0cdc
-
SSDEEP
768:gi8rtkYKC58mUYWY3tzuTPbUwA9LNGAzXM0ibMuxGSwqYkuIgn21DCgyyWZscx:tjYd5RWY3cgwAlZz80i1xqkudY1yhs4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/80000_1000.exe
Files
-
a0f0cdf8c5840cfbbbee71752541e5df.rar
-
80000_1000.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ