Static task
static1
Behavioral task
behavioral1
Sample
9oKJD6f1zhp0faI.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9oKJD6f1zhp0faI.exe
Resource
win10v2004-20230915-en
General
-
Target
9oKJD6f1zhp0faI.exe
-
Size
616KB
-
MD5
0ddfc920f96032fe88083317dc5d109d
-
SHA1
4717cb135554de5f00ee23394d90e94e48140785
-
SHA256
e4b46a390ed3597681b12b1834985a5a8ddaf4cae96ff14ed8c2ed0d1784c11c
-
SHA512
e2a3555c997e39e8fd4fb1df2bf72ca54540868837a7e77a4fe79eafdeb4f5d83a9343827ec0dc8f9e0d1db32ea50e57c8bf52937c1849351d1ac34602adcc08
-
SSDEEP
12288:uLfb98HzxK12vOGGzrn4PtDyTmbOYbZGqgUgMse4BpN:kbeTxU2vOGuaDyTmbfbZ0UgJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9oKJD6f1zhp0faI.exe
Files
-
9oKJD6f1zhp0faI.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 606KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ