Static task
static1
Behavioral task
behavioral1
Sample
9a4a1c7028af3f19ad5163691b49714d93d24ab9593504fceda750c716a476a2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9a4a1c7028af3f19ad5163691b49714d93d24ab9593504fceda750c716a476a2.exe
Resource
win10v2004-20230915-en
General
-
Target
9a4a1c7028af3f19ad5163691b49714d93d24ab9593504fceda750c716a476a2
-
Size
8.6MB
-
MD5
43363a846bdae766dcb24f9ae28ee687
-
SHA1
741ca4e8e143db902d28a201966d5f6a0e694248
-
SHA256
9a4a1c7028af3f19ad5163691b49714d93d24ab9593504fceda750c716a476a2
-
SHA512
11095be4a3aecf4d32c5dbb58d04daf8a43554e00226258965302ea39053ee7c4d1455cce107030d5571192c110e149ae2a338743997f94699980a9cf7a13484
-
SSDEEP
196608:mZ3Qwsa3l833glF8GsSFOhmecnP9AAHmdaESEKXNnhF7aN:mZ3RZl8aZNs5cnP9AndrS3XthlQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a4a1c7028af3f19ad5163691b49714d93d24ab9593504fceda750c716a476a2
Files
-
9a4a1c7028af3f19ad5163691b49714d93d24ab9593504fceda750c716a476a2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 612KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 332KB - Virtual size: 541KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 40KB - Virtual size: 566KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 56KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 13.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 7.5MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ