Static task
static1
Behavioral task
behavioral1
Sample
09108c290151e98b5617bb6a41afac57.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
09108c290151e98b5617bb6a41afac57.exe
Resource
win10v2004-20231215-en
General
-
Target
09108c290151e98b5617bb6a41afac57
-
Size
9.0MB
-
MD5
09108c290151e98b5617bb6a41afac57
-
SHA1
b3bd1b0968d4f7aa277de1bc92eb17796ac97b27
-
SHA256
d9782c57e8503dfb93db3d5bd9192422ceff13ae440927f9763b34f2ab8d2535
-
SHA512
7ba020408564f4c2bf5f5112d2c01d8b3e4ce60fbc275d578a3e9880ff73b9adfa6e0dfb3f00be2cb07a059dca5d3b8c9f4e3d058f7bb2e9db7d5504ca768cd7
-
SSDEEP
196608:FAwfUgU3U7cfUefUxU4UUU3UUUJon9TVn9TBfUmn9TLefUXn9T8n9T+n9Tw:9qEwFHrzD0UC4i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09108c290151e98b5617bb6a41afac57
Files
-
09108c290151e98b5617bb6a41afac57.exe windows:1 windows x86 arch:x86
500ff1538958cc73738bf0c262a1773f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
user32
MessageBoxA
Sections
.dafixer Size: 541KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 10KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 122KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE