Static task
static1
Behavioral task
behavioral1
Sample
datasheet -VALVES MA9881.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
datasheet -VALVES MA9881.exe
Resource
win10v2004-20230220-en
General
-
Target
datasheet -VALVES MA9881.exe
-
Size
969KB
-
MD5
62a662fb0f86fcb7c883fff342679dee
-
SHA1
3772dc9e3f8edaae8f8f5ff3143c1b5e1572b4cb
-
SHA256
4f83fcc39abe5edc0e1ff4abdfb7fb49b01ee918c3c0ab6f0378551450349271
-
SHA512
993b9a042961a52675fff8582591fca92f8f5491195e96304680d17623100894eecc1c905b194fdd64168df0c8c5711983b432f45f321c99684505d32aaed766
-
SSDEEP
12288:1N7QASamX/zZBEP85Rp4DUxs3ImvxwzuPZOrNRzbJ8qLf35YEUDl8Tw7cNUryAX7:1NE8mv9BEP8zpru3IyxwzuPZWDJ73u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource datasheet -VALVES MA9881.exe
Files
-
datasheet -VALVES MA9881.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 966KB - Virtual size: 966KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ