Static task
static1
Behavioral task
behavioral1
Sample
c8fef8254b824b667763e0703429417a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c8fef8254b824b667763e0703429417a.exe
Resource
win10v2004-20240226-en
General
-
Target
c8fef8254b824b667763e0703429417a
-
Size
1.4MB
-
MD5
c8fef8254b824b667763e0703429417a
-
SHA1
3e1b422ccf6a021f66908d2a84d5a14b10f45f22
-
SHA256
477af70b7bc5324d7211fcbfa0b37143d7ac6c11d9e515b6450a353e6798fa9c
-
SHA512
f82bc1c47675f0f1edadf96ffa61be08907b1205a2b5fdf64384686d41b381ec97a32d80be167fd2a479e71ba55c27daa63d26fe95788506211225e401361d8a
-
SSDEEP
24576:UQv+1jJ3u9lgMSCa4TUiR+9y/iAFfSptzfg5KHqOV042dz7N9AvI+LZOa0A1caVg:I7YSD4TUiR+yiEO7lJ2dSDOayOJPVPg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8fef8254b824b667763e0703429417a
Files
-
c8fef8254b824b667763e0703429417a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE