Static task
static1
Behavioral task
behavioral1
Sample
c9347ed95f101aea2b0b9a4e2752638d0e3ea88762ac4a12913c0805577c2c9c.exe
Resource
win7-20231023-en
General
-
Target
c9347ed95f101aea2b0b9a4e2752638d0e3ea88762ac4a12913c0805577c2c9c
-
Size
2.2MB
-
MD5
1df118bc12e196960fd895ec598c828a
-
SHA1
1a36a7e63ad185b5e163db3af68969882a14bd37
-
SHA256
c9347ed95f101aea2b0b9a4e2752638d0e3ea88762ac4a12913c0805577c2c9c
-
SHA512
e6061d5f97178720ae5fca69b124d8dd7e61faedad492539d7a808a0a863e1e4a4ae0a77152a998c8a7aa2f69c584989bf57264c946f2df05b10bf44292cbdf6
-
SSDEEP
49152:o30TA2eTawDTRSYwedCsgfHt/vwt4OkrW8:o3098nR4angl4t4OkK8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9347ed95f101aea2b0b9a4e2752638d0e3ea88762ac4a12913c0805577c2c9c
Files
-
c9347ed95f101aea2b0b9a4e2752638d0e3ea88762ac4a12913c0805577c2c9c.exe windows:4 windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 324KB - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rkqafdxj Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ftysxyvr Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE