Static task
static1
Behavioral task
behavioral1
Sample
9d82a6bf1c356fe0fe0081f3a71f2383ec8b0138528c2c6bcc8205dd4a50b55f.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9d82a6bf1c356fe0fe0081f3a71f2383ec8b0138528c2c6bcc8205dd4a50b55f.exe
Resource
win10v2004-20230703-en
General
-
Target
9d82a6bf1c356fe0fe0081f3a71f2383ec8b0138528c2c6bcc8205dd4a50b55f
-
Size
5.9MB
-
MD5
b419051e313f622bf30b2506412102dc
-
SHA1
439c1fb8eb772a60f11b0e782ca89e1acd67c83b
-
SHA256
9d82a6bf1c356fe0fe0081f3a71f2383ec8b0138528c2c6bcc8205dd4a50b55f
-
SHA512
9338f4df8fdc8f64778d10a71d94a13e24e8d2ad79b0e613bc10d930c58dc672249e7ed6d131e28faf7d1d7a076be45a24b5dbf1db1839ff39a644c2928ae9e3
-
SSDEEP
98304:4GYNgZEX3Zewjl2r3teVZAl0V/wdfMXR5fbQsDyDUURBITrUWchB5py77PDs0/bb:4G9Zw34mArUZ0w84TksibyfP9b9XsTh8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9d82a6bf1c356fe0fe0081f3a71f2383ec8b0138528c2c6bcc8205dd4a50b55f
Files
-
9d82a6bf1c356fe0fe0081f3a71f2383ec8b0138528c2c6bcc8205dd4a50b55f.exe windows x64
0b3169efe8f7ffb748cc51653a438d75
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetModuleHandleA
user32
DefWindowProcA
shell32
ShellAboutW
advapi32
GetUserNameA
Sections
Size: - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: - Virtual size: 10.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 599KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE