Static task
static1
Behavioral task
behavioral1
Sample
8a95aa23d105a69f823a58b4e9caf347e4f0d81fad0c0baf6d1b58930fccf6f3.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8a95aa23d105a69f823a58b4e9caf347e4f0d81fad0c0baf6d1b58930fccf6f3.exe
Resource
win10v2004-20240802-en
General
-
Target
8a95aa23d105a69f823a58b4e9caf347e4f0d81fad0c0baf6d1b58930fccf6f3
-
Size
11.5MB
-
MD5
8d2cbd3f43223eb0d6686b2d4363b50f
-
SHA1
228816963091ac5282c10c59194b177ad1c5d80f
-
SHA256
8a95aa23d105a69f823a58b4e9caf347e4f0d81fad0c0baf6d1b58930fccf6f3
-
SHA512
41d0a7ab12db9ac6e428d829b8e4956ca1e42cad0221a6cebaace3dd24d46b502a021201115acecf9a6e272ee149688239fcab75343edbad7f20296d44ad1da9
-
SSDEEP
196608:DoO0O5zrbIk3VoWL0o48IgKau9S8KKdcHg5FrXyw8QsV7KLOohjKovKdSc1Ixr9U:Dd0O5zr3FoW4L8gar8fdcHgjD3prODoy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a95aa23d105a69f823a58b4e9caf347e4f0d81fad0c0baf6d1b58930fccf6f3
Files
-
8a95aa23d105a69f823a58b4e9caf347e4f0d81fad0c0baf6d1b58930fccf6f3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 1.6MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 17KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 24KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 39KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 72B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 196KB - Virtual size: 327KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 846KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 14.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 8.7MB - Virtual size: 8.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ