Static task
static1
Behavioral task
behavioral1
Sample
09bb32d11f098fcdb3ad4bc32c4440ad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
09bb32d11f098fcdb3ad4bc32c4440ad.exe
Resource
win10v2004-20231215-en
General
-
Target
09bb32d11f098fcdb3ad4bc32c4440ad
-
Size
402KB
-
MD5
09bb32d11f098fcdb3ad4bc32c4440ad
-
SHA1
0620155e56e56a09b9035898fda12456ea928a77
-
SHA256
046643525f461b1c350b49dc539a5b144aa6cfeaad06faf00a9dad4b016ff33a
-
SHA512
641953cd8ad07d33237c9f719617063c5e1e441e742a5e72fd6cbcc9e8d1955ad3c930c39a00c214f8158fc74dc5a5b8f00bfc1271e0d8361281730a84b6a908
-
SSDEEP
6144:PQAO0JQG6CQcLkpUP+r4zVY4/xXxjG81u9FJ45+S5NO38X66L5DDvA:PQ+JQG6Lcz+ryVdxXM8+FJu5YMXxLhA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09bb32d11f098fcdb3ad4bc32c4440ad
Files
-
09bb32d11f098fcdb3ad4bc32c4440ad.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.yvs Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE