Static task
static1
Behavioral task
behavioral1
Sample
8fbbe34d33bba74c01e98bbb656ef665170c52980ba27336ce610efce5237bc6.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
8fbbe34d33bba74c01e98bbb656ef665170c52980ba27336ce610efce5237bc6.exe
Resource
win10v2004-20240226-en
General
-
Target
8fbbe34d33bba74c01e98bbb656ef665170c52980ba27336ce610efce5237bc6
-
Size
173KB
-
MD5
9cc039f3c87ef86cfbdcf2ed217247dd
-
SHA1
6fc0551bfa08d1d3271432f84e56c2ce92fd03b3
-
SHA256
8fbbe34d33bba74c01e98bbb656ef665170c52980ba27336ce610efce5237bc6
-
SHA512
4d3676cb9b4a10d714a4fbc5682a774e8b0c3ce27bc305af3df713a3ab909977e296a49840e5274ef8c3d2ff849bb49b8a8c5549abf94a96460183f410b1186b
-
SSDEEP
3072:C49by94k/A6ziOKHN3gpLtW8k6SJQj2b6TAM2fU5w4bXMUc:C49bvk/N+HN3gpLM6fj2b6TAM2fMc
Malware Config
Signatures
-
Detects executables packed with ConfuserEx Mod 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_ConfuserEx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8fbbe34d33bba74c01e98bbb656ef665170c52980ba27336ce610efce5237bc6
Files
-
8fbbe34d33bba74c01e98bbb656ef665170c52980ba27336ce610efce5237bc6.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ