Static task
static1
Behavioral task
behavioral1
Sample
00a9e21625bb3e51f85bace92579f4ee.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00a9e21625bb3e51f85bace92579f4ee.exe
Resource
win10v2004-20231222-en
General
-
Target
00a9e21625bb3e51f85bace92579f4ee
-
Size
635KB
-
MD5
00a9e21625bb3e51f85bace92579f4ee
-
SHA1
21fed24fe843b736e0a2de4eb128437525b2ee70
-
SHA256
301a3e482c73bec1966c2056740f03fd6e853bbd717fe705507c40262e37c3ff
-
SHA512
ae17f86005edc8e839c7f7882cefa17ebfba7d9f45b360f1bd862a29d10ec13a59c02337f20bb4f880a40614fe85414edd315ebe561e46c42578a5df69196280
-
SSDEEP
6144:8JzG40WO8Bxb7G1FWh6hUN92Ig9CBV73q9gTiNLBIjobQnf5:RD8r7GyhWE9JgOaxEnB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00a9e21625bb3e51f85bace92579f4ee
Files
-
00a9e21625bb3e51f85bace92579f4ee.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 749KB - Virtual size: 749KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ