Static task
static1
Behavioral task
behavioral1
Sample
9ad786b10ec850a7a27829af1d54deec4dffddcd977388ec6cdaa77e7ebe1a7a.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9ad786b10ec850a7a27829af1d54deec4dffddcd977388ec6cdaa77e7ebe1a7a.exe
Resource
win10v2004-20230915-en
General
-
Target
9ad786b10ec850a7a27829af1d54deec4dffddcd977388ec6cdaa77e7ebe1a7a
-
Size
1.5MB
-
MD5
ff5aead735406909d3bfe16fcb25ea50
-
SHA1
ac9d3725124eacf5c60e9ddbe85b8173b42da806
-
SHA256
9ad786b10ec850a7a27829af1d54deec4dffddcd977388ec6cdaa77e7ebe1a7a
-
SHA512
5f6696f1518fb31ed5362e015759e07282fdb5fcf3796970880d09d07c0ec8830cf72ccb5e9dabe5e45eb3da01607a923e7cbfcbe761f8b6a63eccd3d0617f76
-
SSDEEP
24576:DB2BfYtFbY3CAvzcnQazB6eM0cRbV+EtQ+gx/GDpY4w5Ee8IRhxtqCEz9t0xl2F:DIBQSdcQY6BRbgEtr4GVYB5EePPBEBtl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ad786b10ec850a7a27829af1d54deec4dffddcd977388ec6cdaa77e7ebe1a7a
Files
-
9ad786b10ec850a7a27829af1d54deec4dffddcd977388ec6cdaa77e7ebe1a7a.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fg80 Size: - Virtual size: 570KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fg81 Size: - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
a8s7d Size: 383KB - Virtual size: 384KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
a8s7d Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
a8s7d Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ