Static task
static1
Behavioral task
behavioral1
Sample
8ddb5b025db3c3e9a3662f8fe15f1a0280545615593893f075c94ac60b419a92.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8ddb5b025db3c3e9a3662f8fe15f1a0280545615593893f075c94ac60b419a92.exe
Resource
win10v2004-20241007-en
General
-
Target
8ddb5b025db3c3e9a3662f8fe15f1a0280545615593893f075c94ac60b419a92.exe
-
Size
430KB
-
MD5
944d54317bad9459a0deb6ff27424b68
-
SHA1
5f826c7a53e3193ca6ec9947cd4901ac28508794
-
SHA256
8ddb5b025db3c3e9a3662f8fe15f1a0280545615593893f075c94ac60b419a92
-
SHA512
2810674ca4a3611434f5b2beb5655b33c9691df5af597089a2218903c6ffc97b8ba7ad9c3512ebc6e35a17e3dc9cd624aec30d2a0412d9d67370c7053f01bddb
-
SSDEEP
12288:Lq+eBVvFqJFTPMHggk1l3EA6mVuRRvTFnpWaCrj:xkvFq01E/6mKvTJ7Crj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8ddb5b025db3c3e9a3662f8fe15f1a0280545615593893f075c94ac60b419a92.exe
Files
-
8ddb5b025db3c3e9a3662f8fe15f1a0280545615593893f075c94ac60b419a92.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 424KB - Virtual size: 424KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ