Static task
static1
Behavioral task
behavioral1
Sample
9a3f32605fcae57a1a2732c5cf185234.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9a3f32605fcae57a1a2732c5cf185234.exe
Resource
win10v2004-20231222-en
General
-
Target
9a3f32605fcae57a1a2732c5cf185234
-
Size
392KB
-
MD5
9a3f32605fcae57a1a2732c5cf185234
-
SHA1
19b4d64f892784dc8bd6c073ca5f14ff770650b5
-
SHA256
11cc0a30683f67a38962cf16150258482b33793a91523906a1f3c701e4e9dbdc
-
SHA512
628389c82e6fca0572f40b97cd4fd8a157b1fad2ad245993de6bdf0c5a70ab9723431d3e91a982586f5d8adcb40824bb4b77144a18716fc9dea2d7c3b1d8bb61
-
SSDEEP
6144:nPX1vbbAzYdfMLhY7lHZlMEpxiFiqm3tbfYEfMLhY7lHZlMEp:ntvhrnrj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a3f32605fcae57a1a2732c5cf185234
Files
-
9a3f32605fcae57a1a2732c5cf185234.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 389KB - Virtual size: 389KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ