Static task
static1
Behavioral task
behavioral1
Sample
09a32979c530c80cb87f56d7eeda2c0b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
09a32979c530c80cb87f56d7eeda2c0b.exe
Resource
win10v2004-20231222-en
General
-
Target
09a32979c530c80cb87f56d7eeda2c0b
-
Size
1.7MB
-
MD5
09a32979c530c80cb87f56d7eeda2c0b
-
SHA1
4b7b0320dd74ad2fe9fc5e2d91e476d6dca411bf
-
SHA256
a2c87d019943bf7d1d05f87749c574d10e41e5147f174ee6de6605db8728b8ca
-
SHA512
3e0716ecbc6b72ce270e5d63864a1c439f39c40b91a6db57d9bfbb05b9e365ada86313bd8095d79b23a2cefa2765b17fa765a28c7b41d02a9d0543682cafb539
-
SSDEEP
49152:DDZHyO9BQ2ZpZ4QKtojLzsPi8/4tLE5Fj:DDTBQ2F4QKOPIPi8f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09a32979c530c80cb87f56d7eeda2c0b
Files
-
09a32979c530c80cb87f56d7eeda2c0b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 6KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 126KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Winlogon Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE