Static task
static1
Behavioral task
behavioral1
Sample
c8f57e295887b2018cc6b2bdc080feed.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c8f57e295887b2018cc6b2bdc080feed.exe
Resource
win10v2004-20240226-en
General
-
Target
c8f57e295887b2018cc6b2bdc080feed
-
Size
220KB
-
MD5
c8f57e295887b2018cc6b2bdc080feed
-
SHA1
490b20589a41677b3c554711209f0564653b5079
-
SHA256
e7d37a9b735219bbc3c505e96268ff416aeeee6f50944d734df6245543b2157c
-
SHA512
7ba1772c8b74e6d1496459fcf62b7741108a19a579e6e8ba8d3f7bf5c09d72745bf4be2227699c14c8d3168f541853ea467721ca00c9d92f559823c6bbeb457e
-
SSDEEP
6144:swYfKYHgsAi8Y+7G9qso25Zqww4Y/nJRo8rqq:nYiYHBAUt9Sck4Y/nTrrf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8f57e295887b2018cc6b2bdc080feed
Files
-
c8f57e295887b2018cc6b2bdc080feed.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 244KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 592KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE