Static task
static1
Behavioral task
behavioral1
Sample
2024-12-21_8b2aa0f8aa9886903d7550e94a92fffd_hiddentear.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-12-21_8b2aa0f8aa9886903d7550e94a92fffd_hiddentear.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-12-21_8b2aa0f8aa9886903d7550e94a92fffd_hiddentear
-
Size
388KB
-
MD5
8b2aa0f8aa9886903d7550e94a92fffd
-
SHA1
0468ce60ce5e589e30b44783b266b1bf56f0f37a
-
SHA256
7577262fc95eb1cd41448a817e9bf4cdf4c235ba5db83cb4992eb9b766ffb452
-
SHA512
c4a0fc55478e2787596bd23c79b5b403e9e7182cab7220ec06938f46df4556368152933aeef9480ef3a3466b5d8c7fc9a5e58404603e114f4c098794cb48012f
-
SSDEEP
6144:KriwfRtCYQA2XFiFLL0E2XEiN0K3k9/pXEw8dHJhTdUB5jS+lDAA:e5tCllbXEyUi7dHJVdUB5NdAA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-12-21_8b2aa0f8aa9886903d7550e94a92fffd_hiddentear
Files
-
2024-12-21_8b2aa0f8aa9886903d7550e94a92fffd_hiddentear.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 288KB - Virtual size: 287KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ