Static task
static1
Behavioral task
behavioral1
Sample
8e1b83ae1a0f21e09b5e50c38dbab745738682bdaff5fdf8a646ce8f8fdf5a3e.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
8e1b83ae1a0f21e09b5e50c38dbab745738682bdaff5fdf8a646ce8f8fdf5a3e.exe
Resource
win10v2004-20240508-en
General
-
Target
8e1b83ae1a0f21e09b5e50c38dbab745738682bdaff5fdf8a646ce8f8fdf5a3e.exe
-
Size
572KB
-
MD5
541803839f3a859b1b764fa4f1cafd73
-
SHA1
80d320257f174430aae389bb2591d4cbb293bba6
-
SHA256
8e1b83ae1a0f21e09b5e50c38dbab745738682bdaff5fdf8a646ce8f8fdf5a3e
-
SHA512
2339517a3a6d31af6956cc25a077377557a291787b8db27d6199ece877eb2f8212f8bb537ece500e5c374a65a1d7dccbfc5f60f93672bbe6ae4225719c53865b
-
SSDEEP
12288:Uham2cGUY4HBITMOsxpLo6zR+OAVcHo83oWcHV1W2:UhB2cGHYO+e6gUeWE42
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e1b83ae1a0f21e09b5e50c38dbab745738682bdaff5fdf8a646ce8f8fdf5a3e.exe
Files
-
8e1b83ae1a0f21e09b5e50c38dbab745738682bdaff5fdf8a646ce8f8fdf5a3e.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ