Static task
static1
Behavioral task
behavioral1
Sample
092caaf6419439d6cb3eca89c3269ff9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
092caaf6419439d6cb3eca89c3269ff9.exe
Resource
win10v2004-20231215-en
General
-
Target
092caaf6419439d6cb3eca89c3269ff9
-
Size
602KB
-
MD5
092caaf6419439d6cb3eca89c3269ff9
-
SHA1
96361377d8b0c1cd32a9c86dec7341724e947e0b
-
SHA256
e96e44a8ed0723108a9e7379a6fcccd1a41e19538ba6b2c156e5f239d42b3647
-
SHA512
e3da4804be4c357a6a38970ebbbb15d1450ac303f078a8fe7ac85faf26d9364cb6981fd34011fb5c36c778bc4c2c08d697ebdef114dd88281bbdb2b9a3b28436
-
SSDEEP
12288:ByCThDQKnob/JAMY9Hi7U9VqdMJX+U7zPbfZZuhTJkKvuH:BP7o/7U9V0Ml7zbDuh1puH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 092caaf6419439d6cb3eca89c3269ff9
Files
-
092caaf6419439d6cb3eca89c3269ff9.exe windows:5 windows x86 arch:x86
c9d69d86165bbfc36ee20f34dc40882a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32 kernel32
Sleep �q�
Sections
.text Size: 48KB - Virtual size: 59.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 524KB - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ