Static task
static1
Behavioral task
behavioral1
Sample
c8ea6e544cdfc9045b8968425c9385e1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c8ea6e544cdfc9045b8968425c9385e1.exe
Resource
win10v2004-20240226-en
General
-
Target
c8ea6e544cdfc9045b8968425c9385e1
-
Size
233KB
-
MD5
c8ea6e544cdfc9045b8968425c9385e1
-
SHA1
32af92ddb4cfa96be9234642d920873612c6a91e
-
SHA256
aa0133a794b0d957114cfa4179636ffbd426185c1e85b7bd441db800f691de35
-
SHA512
7bb75432618b73980b62506feacca05eb9805066eee979f4e233564596186f407f58a01b5620527cad8e0f777be9f63742a0a67488657086e52b896a7fdf5923
-
SSDEEP
6144:HlT1cACTfgjdlAeGxquWbEKaYpJK2K7OU52:F1kfgjdlAeUBKEQKyM2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8ea6e544cdfc9045b8968425c9385e1
Files
-
c8ea6e544cdfc9045b8968425c9385e1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 563KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.delete Size: 512B - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 85KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklstb Size: 343KB - Virtual size: 359KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relo2 Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ