Static task
static1
Behavioral task
behavioral1
Sample
8ad4cfc5910c7367a8d9e92d4a1ebbb02b659abef458d8ee765ac09e3e46a484.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8ad4cfc5910c7367a8d9e92d4a1ebbb02b659abef458d8ee765ac09e3e46a484.exe
Resource
win10v2004-20240611-en
General
-
Target
8ad4cfc5910c7367a8d9e92d4a1ebbb02b659abef458d8ee765ac09e3e46a484.exe
-
Size
879KB
-
MD5
6ac757dcefc7993df00cff137458b643
-
SHA1
056f655dee89d1d0939c27f3acf803d5f9c3f446
-
SHA256
8ad4cfc5910c7367a8d9e92d4a1ebbb02b659abef458d8ee765ac09e3e46a484
-
SHA512
fc7088dd68a1e1430cba2db998c7f4e1f5d2ba38ff22bca6e5d492e430dfee6fe5493218c6a9522b35538bc7e89d647bb3f32e19e569f4cdc23a1f076c01b9d0
-
SSDEEP
12288:KueZmVKC5H2kbS89M+w53L4WfI6QJu8wR0LiBYhnWcHuIYVPeUxfc81:kt4qe0DwhWrIYVPeU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ad4cfc5910c7367a8d9e92d4a1ebbb02b659abef458d8ee765ac09e3e46a484.exe
Files
-
8ad4cfc5910c7367a8d9e92d4a1ebbb02b659abef458d8ee765ac09e3e46a484.exe.exe windows:4 windows x86 arch:x86
Password: infecte
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 876KB - Virtual size: 876KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ