Static task
static1
Behavioral task
behavioral1
Sample
c8989a43ae0a90fcd48c1f4b602e8351.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c8989a43ae0a90fcd48c1f4b602e8351.exe
Resource
win10v2004-20240226-en
General
-
Target
c8989a43ae0a90fcd48c1f4b602e8351
-
Size
1024KB
-
MD5
c8989a43ae0a90fcd48c1f4b602e8351
-
SHA1
19d30f05acf87adb11a30ac65bf2b886c0c2c127
-
SHA256
a9b1b69d953128f237d0bd7ca0524b27797313bcfef57530e5d5753e6a5c166e
-
SHA512
b791aa10a14e130f691ee47fbbc969c9c37e964cd3a69c66442cea658847277e0ea5913e9a3ad20fd8b3b3eb5096f783acb2f341e5498274aedd8c857a505446
-
SSDEEP
12288:tcPIRBUG+4x/qHfMfo38r1ZzH/Oeabkc+nZlLgNsbVL9LKdPucWKZuIRSCuF5/Qa:2wDVrdUfio3M1Z7ZlLTVL9wbqb/8Laz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8989a43ae0a90fcd48c1f4b602e8351
Files
-
c8989a43ae0a90fcd48c1f4b602e8351.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 241B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE