Static task
static1
Behavioral task
behavioral1
Sample
8e4b02172f435122bf9b67b6f3b2085c02b8ea7739dc81913a1763bce6468d4c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8e4b02172f435122bf9b67b6f3b2085c02b8ea7739dc81913a1763bce6468d4c.exe
Resource
win10v2004-20241007-en
General
-
Target
8e4b02172f435122bf9b67b6f3b2085c02b8ea7739dc81913a1763bce6468d4c.exe
-
Size
238KB
-
MD5
2c75fcf7afd8e374559b629b609f0d7d
-
SHA1
0ed1d4386fee5fee87de0ee481f94d34a922bd83
-
SHA256
8e4b02172f435122bf9b67b6f3b2085c02b8ea7739dc81913a1763bce6468d4c
-
SHA512
5c561b036d9748c9d2eeae2652a510debef5bd377e0de6ad765f8b5abf8111b9acf7fc80bd8726b42c85be91b632a73d8408ee57260271a261544791c82e01ee
-
SSDEEP
6144:+mxGw+1gQVQZUvuPiDwbY17qQn4CsqqN+38vyjfBs:VioUL7qQn4Ca+38vyi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e4b02172f435122bf9b67b6f3b2085c02b8ea7739dc81913a1763bce6468d4c.exe
Files
-
8e4b02172f435122bf9b67b6f3b2085c02b8ea7739dc81913a1763bce6468d4c.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 139KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE