Static task
static1
Behavioral task
behavioral1
Sample
8b786784c172c6f8b241b1286a2054294e8dc2c167d9b4daae0e310a1d923ba0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8b786784c172c6f8b241b1286a2054294e8dc2c167d9b4daae0e310a1d923ba0.exe
Resource
win10v2004-20240226-en
General
-
Target
8b786784c172c6f8b241b1286a2054294e8dc2c167d9b4daae0e310a1d923ba0
-
Size
47KB
-
MD5
a59c328d69fd858d116067159b0cfbf2
-
SHA1
12ac5cf88335e14c483f05595d85415ad0a16277
-
SHA256
8b786784c172c6f8b241b1286a2054294e8dc2c167d9b4daae0e310a1d923ba0
-
SHA512
044eb23c00926d615d01653e7854c4985ba7e5d4a08d05744d2ffe70d6573c6d95def98c5b9c52a171ef7379fa9ac35393980c87b59d4f34a7679caf00d7a5de
-
SSDEEP
768:Go3IsGupQvkUWaCcPOZsFpNCw52TjRel054vzzA:GzsG5vkU6cP/N92pel0yXA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b786784c172c6f8b241b1286a2054294e8dc2c167d9b4daae0e310a1d923ba0
Files
-
8b786784c172c6f8b241b1286a2054294e8dc2c167d9b4daae0e310a1d923ba0.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ