Static task
static1
Behavioral task
behavioral1
Sample
f9eb6f294041a9b117bd9751bcd26721.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f9eb6f294041a9b117bd9751bcd26721.exe
Resource
win10v2004-20231222-en
General
-
Target
f9eb6f294041a9b117bd9751bcd26721
-
Size
141KB
-
MD5
f9eb6f294041a9b117bd9751bcd26721
-
SHA1
0c9c8e8ee9e704e628f1d1f65900b0633f1a6196
-
SHA256
98df16ca3e549de6bc7368a40cae90e52509f8bfbded6d330310036b2e5be21b
-
SHA512
a3c6ff4d34b31837b2c630c4ad4576c480f45bdb22bd5447539226146634cac767b0ddf609a7bb4c81e89d3d217fb330b9bf52efac71b8d17ba96b954ed61754
-
SSDEEP
3072:XMq3qCEqUTIzWodffH/oDYmKqdIkyygR7Lxnf4PsNi:cq3q9bT1oxPwEmDdO3t40k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9eb6f294041a9b117bd9751bcd26721
Files
-
f9eb6f294041a9b117bd9751bcd26721.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE