Static task
static1
Behavioral task
behavioral1
Sample
8560ed008c7a2190c002d8b6df75bc6fb6e0a948f3a55303d0cb9694584cb64a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8560ed008c7a2190c002d8b6df75bc6fb6e0a948f3a55303d0cb9694584cb64a.exe
Resource
win10v2004-20240412-en
General
-
Target
8560ed008c7a2190c002d8b6df75bc6fb6e0a948f3a55303d0cb9694584cb64a
-
Size
417KB
-
MD5
e3a66d1a0ad5ceb398d0c9df76c315f8
-
SHA1
48872262f3b570353c36c0c53e29fe0b2ab21cfd
-
SHA256
8560ed008c7a2190c002d8b6df75bc6fb6e0a948f3a55303d0cb9694584cb64a
-
SHA512
f47ca4866234661eb6b2f533f7cd61d4a3aca70c8a0f9fa7500dc11f28255a73b9d1395c6e09c6173d8a37db5bb9f78e3d48652755d147c83f6d37654bee03e6
-
SSDEEP
6144:uOBAPex3f6b0DdMbni+l4Ex3XOdn5GOYqSIOlW3uGRXnvDbfIDUZOW:E2xvUOMxXsZ5GLcTXv9c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8560ed008c7a2190c002d8b6df75bc6fb6e0a948f3a55303d0cb9694584cb64a
Files
-
8560ed008c7a2190c002d8b6df75bc6fb6e0a948f3a55303d0cb9694584cb64a.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jdkey1 Size: 22KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jdkey2 Size: 392KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE