Static task
static1
Behavioral task
behavioral1
Sample
c9d72f5a730aa3514c2457715bffc7604a4284b1a34f3e89acfda54a8709f62e.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
c9d72f5a730aa3514c2457715bffc7604a4284b1a34f3e89acfda54a8709f62e.exe
Resource
win10v2004-20231023-en
General
-
Target
c9d72f5a730aa3514c2457715bffc7604a4284b1a34f3e89acfda54a8709f62e
-
Size
2.5MB
-
MD5
c7df4d586be619f59eabae522f102455
-
SHA1
ab6c5c71a7b210d310aa5321353d7fb8d297e70f
-
SHA256
c9d72f5a730aa3514c2457715bffc7604a4284b1a34f3e89acfda54a8709f62e
-
SHA512
02936cc2122775a948a742c042d1446faeb9e2594b56bac3213d2b556a32213c0f9c265ddf3815f6148b22921c4848680dff55a046aef429b8e4e5c160c20f69
-
SSDEEP
24576:2TSl3hrVa6r8dmp7C91ynhPZkTMqAbBVxhqJIflVt70Vv07bfV76F3dZDa3Cb2bF:2TajRbG916ZuIqolVjcF3dtaSCrL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9d72f5a730aa3514c2457715bffc7604a4284b1a34f3e89acfda54a8709f62e
Files
-
c9d72f5a730aa3514c2457715bffc7604a4284b1a34f3e89acfda54a8709f62e.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 837KB - Virtual size: 836KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
linholer Size: 615KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
linholer Size: 811KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
linholer Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ