Static task
static1
Behavioral task
behavioral1
Sample
09642c04c510829cad1a34e2d812266a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
09642c04c510829cad1a34e2d812266a.exe
Resource
win10v2004-20231215-en
General
-
Target
09642c04c510829cad1a34e2d812266a
-
Size
2.0MB
-
MD5
09642c04c510829cad1a34e2d812266a
-
SHA1
a35e6565f5e3ee4db97e42fa4be8937e6240903a
-
SHA256
05c7aab8cfcb928926b5e8d631e7500e0ab1958173879ed2d98dc55bdf7aa4f0
-
SHA512
56b188a05abf795a37ee1b0e3dd821fdf07ad0888479a3b231877027a4b14a0fb9df69d0a732314b36af5b23794b60ba1a06cd04a9292603abe7f1f23a2f48fa
-
SSDEEP
49152:32q+510zLbHYWKWHjxpbeHtCwCLi2mQ1x5f+FnIzWNsOwh9mgM8D:3F+51iHYR2jDeHtzCLi2mS+IaaCgp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09642c04c510829cad1a34e2d812266a
Files
-
09642c04c510829cad1a34e2d812266a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 305KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ