Static task
static1
Behavioral task
behavioral1
Sample
f8a947dfe1b256f8c4981167c685cd2edad90e3fdd45c145dd98f387738d9405.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
f8a947dfe1b256f8c4981167c685cd2edad90e3fdd45c145dd98f387738d9405.exe
Resource
win10v2004-20240426-en
General
-
Target
f8a947dfe1b256f8c4981167c685cd2edad90e3fdd45c145dd98f387738d9405
-
Size
14KB
-
MD5
8e5d17bf37836715e13ae77679ca9bf4
-
SHA1
769377c0127b61e94a5d9dfea008fb9e0d2e1667
-
SHA256
f8a947dfe1b256f8c4981167c685cd2edad90e3fdd45c145dd98f387738d9405
-
SHA512
5fc9dd44334e38b621a38c6c0748e73e73da7e0928640ad1ef6668673993a016f43d788e622f857367b63c1677bb23203792b96b4d70ae36ffbf1a270ef7c692
-
SSDEEP
384:gaEoH4Zl/MxQZMIIyAc1X9k/BW/hDE045HpOOO:ZZHKMxQZHfdOJ8xAbOOO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8a947dfe1b256f8c4981167c685cd2edad90e3fdd45c145dd98f387738d9405
Files
-
f8a947dfe1b256f8c4981167c685cd2edad90e3fdd45c145dd98f387738d9405.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ