HFyi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8eadfc2a0f3dce9b786340417545bc64a10dbd32e8677bbcf61929df787d4055.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8eadfc2a0f3dce9b786340417545bc64a10dbd32e8677bbcf61929df787d4055.exe
Resource
win10v2004-20240802-en
General
-
Target
8314c08237812a03249735937db7b1b6b1a1c3135f38c52c4980e6205da3e5ff
-
Size
642KB
-
MD5
d8f77ce22d435f9f423e72a7659e4117
-
SHA1
4803393487d468aa0833e391c7f8ce3173664883
-
SHA256
8314c08237812a03249735937db7b1b6b1a1c3135f38c52c4980e6205da3e5ff
-
SHA512
58444debba9645cddefae37cafc1913450e1f11562e6ca7116ff7b69dff603b81dea843746ea67ceb022b097d72f05cdf447e5bfed3a6f0a71bb5bed4415eb7e
-
SSDEEP
12288:9fRs4Dv9BdINZNYOJKaJDxk4NdO0DCnOsNKirJ2y0n:lRs4KNZNYO8aJ17NdO0OOn+o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8eadfc2a0f3dce9b786340417545bc64a10dbd32e8677bbcf61929df787d4055.exe
Files
-
8314c08237812a03249735937db7b1b6b1a1c3135f38c52c4980e6205da3e5ff.zip
Password: infected
-
8eadfc2a0f3dce9b786340417545bc64a10dbd32e8677bbcf61929df787d4055.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 782KB - Virtual size: 782KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ