Static task
static1
Behavioral task
behavioral1
Sample
c8086a8c7ff96f20c01b589efa6b243c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c8086a8c7ff96f20c01b589efa6b243c.exe
Resource
win10v2004-20240226-en
General
-
Target
c8086a8c7ff96f20c01b589efa6b243c
-
Size
48KB
-
MD5
c8086a8c7ff96f20c01b589efa6b243c
-
SHA1
d71996fcbfc342433e6571efcfc44ec7e466d85f
-
SHA256
2f5079bf88ed7a5a36fff2eeb493b3c4ea85e7e88a0c6a62e585ab029fa03b90
-
SHA512
7493475c78760a0fa352e34aa8388c5ca5c4e86697023845657093172db24ddf3533aa12b65b40cfda0fb776b38ac1659fb2c110f67af312a171a3286f1c99aa
-
SSDEEP
768:LY1aSM0waNQB++wNyZP9/dvs8Svz5Eorrw+HDkL9BhZEUf5jLY1NvWQt3cgVnjfN:MsxaNf+zZFRsXEi9yESYT+QtcemIf5t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8086a8c7ff96f20c01b589efa6b243c
Files
-
c8086a8c7ff96f20c01b589efa6b243c.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 43KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE