Static task
static1
Behavioral task
behavioral1
Sample
8bf04278ba3921154b16cc2c14cae995259baac55b112342c0396477e5bcd5cc.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
8bf04278ba3921154b16cc2c14cae995259baac55b112342c0396477e5bcd5cc.exe
Resource
win10v2004-20240508-en
General
-
Target
8bf04278ba3921154b16cc2c14cae995259baac55b112342c0396477e5bcd5cc
-
Size
14KB
-
MD5
016b932f398e9ee6382144297a1754ca
-
SHA1
6da994aed5e2b78c22e9bed30df3ae6abe6763b3
-
SHA256
8bf04278ba3921154b16cc2c14cae995259baac55b112342c0396477e5bcd5cc
-
SHA512
bfae2e1fad3aa06bbd4eb1fe22f31a62e326b5dbf385ad465b5c6b9eae78d46ee979770ef6894b9993f93c86c09b2fc8d5ee6c3a53090d6c37112b4ee9e2b863
-
SSDEEP
384:5kUC9rO1F7dYyEaiFOm7hN4FG2E8XqDE045HUZ:5kUC9SzpYrN/M7EtAQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bf04278ba3921154b16cc2c14cae995259baac55b112342c0396477e5bcd5cc
Files
-
8bf04278ba3921154b16cc2c14cae995259baac55b112342c0396477e5bcd5cc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ