Static task
static1
Behavioral task
behavioral1
Sample
8ee823ac5dd24ab2e2951bd4657f8dc7d5264dbf54eb8b50be870c95203dfa54.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8ee823ac5dd24ab2e2951bd4657f8dc7d5264dbf54eb8b50be870c95203dfa54.exe
Resource
win10v2004-20240226-en
General
-
Target
8ee823ac5dd24ab2e2951bd4657f8dc7d5264dbf54eb8b50be870c95203dfa54
-
Size
47KB
-
MD5
386f3ee6e9bee9f2f2595de348aa402c
-
SHA1
55b39db7a27713fccf5df4a2907657fb21792455
-
SHA256
8ee823ac5dd24ab2e2951bd4657f8dc7d5264dbf54eb8b50be870c95203dfa54
-
SHA512
6d83e62b1ce89f28af96c1a18af338c195f264cea52330983de57233beb43f70b28895b3d0ada49c4463a4e9adf04d33752210270e16086d121038076aa5fe3f
-
SSDEEP
768:PDhGCSSDaXdF+lF7P7J5reaCn+9JO2shY8PLUpb6VPvYqBN6cNFfAXNIjlN1Gv89:BSY+A37feaCMJDmYsLIb4PvYqHB/AdIn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ee823ac5dd24ab2e2951bd4657f8dc7d5264dbf54eb8b50be870c95203dfa54
Files
-
8ee823ac5dd24ab2e2951bd4657f8dc7d5264dbf54eb8b50be870c95203dfa54.exe windows:4 windows x86 arch:x86
d62ab77434adac1b7f4219eeeaf1d72c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler3
memcpy
fclose
fwrite
fopen
strcat
strlen
exit
strstr
Sections
.text Size: 46KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE