??4CIDEReader@@QAEAAV0@ABV0@@Z
Static task
static1
Behavioral task
behavioral1
Sample
9a58b8265449036d6ea62cb598ba07e57833d74f469e5149f1f68c54f724182a.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
9a58b8265449036d6ea62cb598ba07e57833d74f469e5149f1f68c54f724182a.exe
Resource
win10v2004-20230621-en
General
-
Target
9a58b8265449036d6ea62cb598ba07e57833d74f469e5149f1f68c54f724182a
-
Size
384KB
-
MD5
4501567f6e6d4f61ec25e15fd300c6ea
-
SHA1
be188c52487a9f49721b88df0d143ce4fc8f3ce2
-
SHA256
9a58b8265449036d6ea62cb598ba07e57833d74f469e5149f1f68c54f724182a
-
SHA512
4ea95b313bfbaad537146fe4bc7546f8b42e0a5ab9d3714b9ce7c5a2f57bfc9607b92cee0d644244f3725199105dedcc9db03e4e9221d5183178bb81ba7d325f
-
SSDEEP
3072:7H6OPhZQWyduvyU7Jqnvlghuxrndxud67JyQ/wFNwKdN8Tauw5rX2TVPtSSJSi:7H6O0WkuZzI5juUQQYFNwJdtVPnk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a58b8265449036d6ea62cb598ba07e57833d74f469e5149f1f68c54f724182a
Files
-
9a58b8265449036d6ea62cb598ba07e57833d74f469e5149f1f68c54f724182a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RY4SHL Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mackt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE