Static task
static1
Behavioral task
behavioral1
Sample
8eb0e8d130b8c08d0676a5b9d533e40850e02c7b5288e379e96e93fc7c641cd5N.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
8eb0e8d130b8c08d0676a5b9d533e40850e02c7b5288e379e96e93fc7c641cd5N.exe
Resource
win10v2004-20241007-en
General
-
Target
8eb0e8d130b8c08d0676a5b9d533e40850e02c7b5288e379e96e93fc7c641cd5N
-
Size
22KB
-
MD5
b4cc7b16d74f25f47cae2d6d93ad5450
-
SHA1
3a6647fc7af4c3b4c54795527bb156bdb78443b0
-
SHA256
8eb0e8d130b8c08d0676a5b9d533e40850e02c7b5288e379e96e93fc7c641cd5
-
SHA512
b1aed1b2ec99a845233519a4f180fe70e19bac0a79e881be613162483c376fe8ea2dce2f4e98b37cd934cb7af20457d967bc9ee5f0eb7a21313252364f4f6136
-
SSDEEP
192:E8R1GM2kS0Ie1GM2kS0IeQ8w18wmt3c8Uc8fwR8KwR8GvJPvJA+mJm4JITIia6KJ:E8g0U0fL+8t8YwTZC4/Eia/b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8eb0e8d130b8c08d0676a5b9d533e40850e02c7b5288e379e96e93fc7c641cd5N
Files
-
8eb0e8d130b8c08d0676a5b9d533e40850e02c7b5288e379e96e93fc7c641cd5N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 227KB - Virtual size: 226KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wixburn Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ