Static task
static1
Behavioral task
behavioral1
Sample
8cb5820982a602feadb0f02fd9f530d676f0dc082d29079250682dc2dffdfc4a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8cb5820982a602feadb0f02fd9f530d676f0dc082d29079250682dc2dffdfc4a.exe
Resource
win10v2004-20240704-en
General
-
Target
8cb5820982a602feadb0f02fd9f530d676f0dc082d29079250682dc2dffdfc4a
-
Size
12.0MB
-
MD5
8ec840c7b9582bb10276ce74043dcfa9
-
SHA1
8e48ba3b81b80bfb8e3f8710ccbd0152aa27d9a6
-
SHA256
8cb5820982a602feadb0f02fd9f530d676f0dc082d29079250682dc2dffdfc4a
-
SHA512
647ed93f3394e906501ff7dcd5c29b88a1af33008ddc6f2dce49bef5b772cf0db8b5d87f5a70ce525122c51be7ed3570316ea6eaeb3efec90d946a16f1bbaccc
-
SSDEEP
196608:hN9cHNyRzU4XO1rpelyl8JE6Nw/bIwsmNlzEHG3:5jz7IQlyl8JE6NwMG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cb5820982a602feadb0f02fd9f530d676f0dc082d29079250682dc2dffdfc4a
Files
-
8cb5820982a602feadb0f02fd9f530d676f0dc082d29079250682dc2dffdfc4a.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12.0MB - Virtual size: 12.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ