Static task
static1
Behavioral task
behavioral1
Sample
9d8b98add0a10edeb24e31d20a4b8c02.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9d8b98add0a10edeb24e31d20a4b8c02.exe
Resource
win10v2004-20231215-en
General
-
Target
9d8b98add0a10edeb24e31d20a4b8c02
-
Size
98KB
-
MD5
9d8b98add0a10edeb24e31d20a4b8c02
-
SHA1
4bb2a86f84c0fa13a41a4812a2cbd9a3c0c9bb1e
-
SHA256
6cb3be02d37e8820272be2c678ef7bb0fd098bae75a87a7a54e8fcf5a89d4e73
-
SHA512
ba475f06bda2ebfec95a7682c65c29d9121f56ed11f27032f9cb5d26cd61c4522d95af70d4b12ba80735dd2ce2c742036d8ae40bde941a029fd47e3768dff920
-
SSDEEP
1536:8QlWFyFZGUjRB8a8ger0ZkWRpHPiTXM9GlA2QEoOk1mVEP9n0+LG3gLEOQURhl:8O3/PZ3KuGlZlzOmVE1n0+LGBchl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9d8b98add0a10edeb24e31d20a4b8c02
Files
-
9d8b98add0a10edeb24e31d20a4b8c02.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 567KB - Virtual size: 566KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 29.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ