Behavioral task
behavioral1
Sample
9239c2f7e97128197c6ebbf39f1a4ffd26c65fc4f5d328ad4dd6291ee9f4b185.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
9239c2f7e97128197c6ebbf39f1a4ffd26c65fc4f5d328ad4dd6291ee9f4b185.exe
Resource
win10v2004-20231023-en
General
-
Target
9239c2f7e97128197c6ebbf39f1a4ffd26c65fc4f5d328ad4dd6291ee9f4b185
-
Size
44KB
-
MD5
3de5a648c41b4ac1504172bf67c64bee
-
SHA1
6d0df6dda18f82677d55d942fa1522cb5fd352be
-
SHA256
9239c2f7e97128197c6ebbf39f1a4ffd26c65fc4f5d328ad4dd6291ee9f4b185
-
SHA512
8dee7dbce97bb5867daa373e067447a5114ee20737a57966c85fe34305a2e38ccf11b6fb598fca65598b07047a307ed5641b93e623b97ef4cbe5dc9b66c6d529
-
SSDEEP
384:04wQwNOnxK8uiEejM/wHQqhrXxGm4hEEZ+DMsuTmex+HFY+EKWbwFt+scR9t9SKg:8O8Ni5jfwqh0hSexnTbg8grGPwb
Malware Config
Signatures
-
Mylobot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9239c2f7e97128197c6ebbf39f1a4ffd26c65fc4f5d328ad4dd6291ee9f4b185
Files
-
9239c2f7e97128197c6ebbf39f1a4ffd26c65fc4f5d328ad4dd6291ee9f4b185.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ