Static task
static1
Behavioral task
behavioral1
Sample
f9c195a7088e25b87f428741a90866f0_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f9c195a7088e25b87f428741a90866f0_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
f9c195a7088e25b87f428741a90866f0_exe32.exe
-
Size
192KB
-
MD5
f9c195a7088e25b87f428741a90866f0
-
SHA1
39f5c4d9b55a28259a5572cb847490c358e698f8
-
SHA256
bc5ebf56a2cad7f6ebb8b29f9e8da9b4fd2b8e09b67cece8f995ca4402a4f00c
-
SHA512
e82be719af100b905ef785cfbc1273e418356b92a6c380398c32a866047438a77692d02da2b28c66b73cbacfe10ac32dfaf0d0bf845ae6453e43181b6ebef89b
-
SSDEEP
768:EcfZBCwxUVSiHS4dy1Jux7ElZ8ET1EbOFef8Gcwjf+WWl/1H5w7Xdnh:EcfZ8OiHJOX7ZQkOq5fu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9c195a7088e25b87f428741a90866f0_exe32.exe
Files
-
f9c195a7088e25b87f428741a90866f0_exe32.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE