Static task
static1
Behavioral task
behavioral1
Sample
9a0de13d6ae5a4fb026deb87d5b0dc8ff58edeaebe37fa892187e1a11078336c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9a0de13d6ae5a4fb026deb87d5b0dc8ff58edeaebe37fa892187e1a11078336c.exe
Resource
win10v2004-20230915-en
General
-
Target
9a0de13d6ae5a4fb026deb87d5b0dc8ff58edeaebe37fa892187e1a11078336c
-
Size
3.2MB
-
MD5
e9ab54284861dd5a3c21cb12e9786ee2
-
SHA1
038d8d0d34f3c5d76a3ccc0ca7808c3dc1f8b080
-
SHA256
9a0de13d6ae5a4fb026deb87d5b0dc8ff58edeaebe37fa892187e1a11078336c
-
SHA512
6c7cab856ff439b9368d036cea9546b27192b77bcdac5749eb10c4b7e8d7f8c9eb00a20f25fae70cf5d7244de3b31a8377ab1b3d80aa60ee83778a54aa43ac50
-
SSDEEP
98304:knaIMEaLd6UzumE6popgKBAehYqGQ6jzL3dYrr:/E4Cm3KlIfqP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a0de13d6ae5a4fb026deb87d5b0dc8ff58edeaebe37fa892187e1a11078336c
Files
-
9a0de13d6ae5a4fb026deb87d5b0dc8ff58edeaebe37fa892187e1a11078336c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4.2MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 160KB - Virtual size: 160KB
IMAGE_SCN_MEM_READ