Static task
static1
Behavioral task
behavioral1
Sample
8a316d7dd444ca4afc6ed1646305d0d8d1a51e6f128dad75486dc3a0bdf1e296.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8a316d7dd444ca4afc6ed1646305d0d8d1a51e6f128dad75486dc3a0bdf1e296.exe
Resource
win10v2004-20240802-en
General
-
Target
8a316d7dd444ca4afc6ed1646305d0d8d1a51e6f128dad75486dc3a0bdf1e296
-
Size
965KB
-
MD5
9cab8d521b94f78ce4624ad43cd294f6
-
SHA1
6a73208780329c8bd62f943fec49ae838ee0674a
-
SHA256
8a316d7dd444ca4afc6ed1646305d0d8d1a51e6f128dad75486dc3a0bdf1e296
-
SHA512
5e906231785c7a100d241e20eb8b5ed6e260e8ba34433da1720790428f82162bb9180d160e034e2b5a5ca09f3d1f9abea7e8b53c7c3c57757da778c9c227fc5e
-
SSDEEP
12288:4N9Q8G906a/GVziWbwQc5VbHR4PL9d4q0QtFtgcuRsT/zG6AnWWnJJLd3rCcvaIa:4v9GZiWbwphbs21e/oAl3d+kd+qx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a316d7dd444ca4afc6ed1646305d0d8d1a51e6f128dad75486dc3a0bdf1e296
Files
-
8a316d7dd444ca4afc6ed1646305d0d8d1a51e6f128dad75486dc3a0bdf1e296.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
?sg.-P Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 626KB - Virtual size: 626KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ