Static task
static1
Behavioral task
behavioral1
Sample
c8ff79ce2b2c33505f7dfb6c4d1b8485.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c8ff79ce2b2c33505f7dfb6c4d1b8485.exe
Resource
win10v2004-20240226-en
General
-
Target
c8ff79ce2b2c33505f7dfb6c4d1b8485
-
Size
506KB
-
MD5
c8ff79ce2b2c33505f7dfb6c4d1b8485
-
SHA1
090ac31864c3792d648660d27b106fa043f7ec13
-
SHA256
19693a7d33e1172166532647e11a4fe26e9031e62cdad93c1f55a8ebf1b4f383
-
SHA512
9ecd612a6e03d03c66de9e39dd90ec0f705d2e55649a950aa2655b67af256242ea3eed7ed4a2028619202a192e93dfd952aefbc919e3b9f150596d8ff545ac60
-
SSDEEP
12288:46p6MleDYpWtUMlN4aYwQen2WYshaRuUPJd/dpMc:Z6MleMptF4g0URXOc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8ff79ce2b2c33505f7dfb6c4d1b8485
Files
-
c8ff79ce2b2c33505f7dfb6c4d1b8485.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ