Static task
static1
Behavioral task
behavioral1
Sample
c8486cda7a023fb014704bc06a4b4dc2.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c8486cda7a023fb014704bc06a4b4dc2.exe
Resource
win10v2004-20240226-en
General
-
Target
c8486cda7a023fb014704bc06a4b4dc2
-
Size
403KB
-
MD5
c8486cda7a023fb014704bc06a4b4dc2
-
SHA1
594e43c5a58e26feb5ee01a7b13c9dc7ab952835
-
SHA256
c1b378e1253d7933717eddbd42784cfc39e250292423f57b77c28f1532fefa31
-
SHA512
b1f5ee832b5e7b14eaa5f1cd3bc89c34b34696939c259dd83d7bc6bfce80c9a74cff276e95280fef4551005b53cc769d6d14df04bdf67da93faf77ec8c2e199b
-
SSDEEP
6144:X3Zv+7hogXloXrq6OtNZIosJ/UXMYSMI+DqXRJx7H9Rma7/P70iyIE2oN2bEmTBL:X3eloX7MX5DqXPldrj5oN+EmTX96
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8486cda7a023fb014704bc06a4b4dc2
Files
-
c8486cda7a023fb014704bc06a4b4dc2.exe windows:4 windows x86 arch:x86
ccf11a2b17ba3e581b3f39cbfb15b05c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualProtect
CreateJobSet
Sections
.text Size: 1024B - Virtual size: 548B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ