Static task
static1
Behavioral task
behavioral1
Sample
8ecf09abbcbca13fbc1ebb202847c1c34dcae16cb331dc76fd8461e5da7a6b82.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8ecf09abbcbca13fbc1ebb202847c1c34dcae16cb331dc76fd8461e5da7a6b82.exe
Resource
win10v2004-20240704-en
General
-
Target
8ecf09abbcbca13fbc1ebb202847c1c34dcae16cb331dc76fd8461e5da7a6b82
-
Size
3.7MB
-
MD5
850859db60a0c5cb9a572716491f4df1
-
SHA1
d9479ec7ff3e12636038dee97bbdc38b59a81319
-
SHA256
8ecf09abbcbca13fbc1ebb202847c1c34dcae16cb331dc76fd8461e5da7a6b82
-
SHA512
14347438e2b4dc69194649a02a4dff902cba354c97514adbc89c4f0583e6fb0069a486418311c188881899b4e7c91b9c4732366bdab824a15b7d0310531360db
-
SSDEEP
98304:uQT0obMNeIfql5GwI7xy06gLP3y5RHgOU7pQ:u+0o4Q8gcwI7xy06Ay3v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ecf09abbcbca13fbc1ebb202847c1c34dcae16cb331dc76fd8461e5da7a6b82
Files
-
8ecf09abbcbca13fbc1ebb202847c1c34dcae16cb331dc76fd8461e5da7a6b82.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 1.4MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.8MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 175KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 286KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE