Static task
static1
Behavioral task
behavioral1
Sample
8ae5b8d64df0ff90f516f2a31bf0089dadbd82925348f39b6351aef19f664143.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8ae5b8d64df0ff90f516f2a31bf0089dadbd82925348f39b6351aef19f664143.exe
Resource
win10v2004-20240508-en
General
-
Target
8ae5b8d64df0ff90f516f2a31bf0089dadbd82925348f39b6351aef19f664143
-
Size
9.6MB
-
MD5
1f177c77e7a613bba0b5804dcaee5003
-
SHA1
d6e3da05b58fc9a8725dae610b4a8253dd70f950
-
SHA256
8ae5b8d64df0ff90f516f2a31bf0089dadbd82925348f39b6351aef19f664143
-
SHA512
d68042895172c0bed84074ff16ed4b42b0b5f66ea34b548527659fafd896dc236aecc780f9d4467676091112c09386a5c7b7f74ce0cb9200e478b3818b316ef6
-
SSDEEP
196608:rLGgLXmWPUzRIPEXJ4hgXouAohPNiHOCJ8IS9sWaSzBz:rLfXEaPY4+Xo9MiHOCJ8IU6SBz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ae5b8d64df0ff90f516f2a31bf0089dadbd82925348f39b6351aef19f664143
Files
-
8ae5b8d64df0ff90f516f2a31bf0089dadbd82925348f39b6351aef19f664143.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NewSec Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 594KB - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 527KB - Virtual size: 12.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zero Size: - Virtual size: 9.5MB
.as_0002 Size: 114KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zero Size: - Virtual size: 392KB
.as_0003 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NewIT Size: 4KB - Virtual size: 9.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Silvana Size: 550B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE