Static task
static1
Behavioral task
behavioral1
Sample
c8900ae1b7d11b377101a7718b32bdf6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c8900ae1b7d11b377101a7718b32bdf6.exe
Resource
win10v2004-20240226-en
General
-
Target
c8900ae1b7d11b377101a7718b32bdf6
-
Size
196KB
-
MD5
c8900ae1b7d11b377101a7718b32bdf6
-
SHA1
b728182ed8f45e1b838efe1d7b5d6e70ba541ab0
-
SHA256
4758dd5014630e25c365b2b511db6ad38ecbcc9e19737cfbcdb4f8185f244509
-
SHA512
9fb0d49f9aa152cc57acce9dfd9009f6ddded2a6c2d4c13299e95458c565e286a1277c1ffa0c783fee776b6b42d8aaf43df036b0a75bffbd133430f2c512b561
-
SSDEEP
3072:91zjMVtyOeSA7vhvQiUB3pJFltEoMnMdVmmmTBh4:LjE5eB7rK3pJ9Eh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8900ae1b7d11b377101a7718b32bdf6
Files
-
c8900ae1b7d11b377101a7718b32bdf6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ