Static task
static1
Behavioral task
behavioral1
Sample
9IWXnDXYqEwdoPC.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
9IWXnDXYqEwdoPC.exe
Resource
win10v2004-20230220-en
General
-
Target
9IWXnDXYqEwdoPC.exe
-
Size
614KB
-
MD5
a0a6631ad7930a9beca4ccb7ca63eb59
-
SHA1
5c8e8895f872ede22383cda6205c214cccea88fb
-
SHA256
52a13a4d61a25202abe50d85c42d4b3aac7e364af1100233c28cf06e4598882e
-
SHA512
31ab4c0971b42bd067229f5673a594a9b691b483c182bb1494efa1428837cd0219e21dbaf002d9dce62ac89f67a945242d4cba9bfaebb72e5241a5fb0427ebe6
-
SSDEEP
12288:+T2x0YPX/NqPsHu6cNq8CoELD1Stux2yVigt3aPyX0:+TdHPsHu6Uq8CzLZmuXVIy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9IWXnDXYqEwdoPC.exe
Files
-
9IWXnDXYqEwdoPC.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 602KB - Virtual size: 601KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ