Static task
static1
Behavioral task
behavioral1
Sample
9326eadfe34af19f222c866c44ddf0b2289d09e86267a8516981defc614ecf34.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
9326eadfe34af19f222c866c44ddf0b2289d09e86267a8516981defc614ecf34.exe
Resource
win10v2004-20230220-en
General
-
Target
9326eadfe34af19f222c866c44ddf0b2289d09e86267a8516981defc614ecf34
-
Size
3.1MB
-
MD5
52fae3029deba90d4510935faae9d7e3
-
SHA1
04d3d64b49ee239951466a65815e14a1d3795eed
-
SHA256
9326eadfe34af19f222c866c44ddf0b2289d09e86267a8516981defc614ecf34
-
SHA512
7f6c9b11ee66c41ade5348ec64d421f0646e1b9931d3c52ccbf9ed35ad7778d05cbd1a190174e8b056d7c18d399db5a2d32efbb877df26e3efe824dcef64f0b5
-
SSDEEP
98304:dKWy9IiQgFslT77xi7KkygEEQFKgOBwh:0Wy9JAwwh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9326eadfe34af19f222c866c44ddf0b2289d09e86267a8516981defc614ecf34
Files
-
9326eadfe34af19f222c866c44ddf0b2289d09e86267a8516981defc614ecf34.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 64KB - Virtual size: 64KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma1 Size: 2.4MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE