Static task
static1
Behavioral task
behavioral1
Sample
09cab783ed326d59f29b681d9f15e517.exe
Resource
win7-20231129-en
General
-
Target
09cab783ed326d59f29b681d9f15e517
-
Size
91KB
-
MD5
09cab783ed326d59f29b681d9f15e517
-
SHA1
8901e357834281358ce2a9c5f78411e5b99e9495
-
SHA256
1c3e265afeffe1bf2874f9ec5f86c569ce58d0edeaab70f9b727f6ad00cee0d5
-
SHA512
6b922f339a57b0977baf2e3d1211cd5c23f27003bfe82d240227ee17398351a84e24e80a08ead601559fd3a75950b5e83660ffb5080534fc3eadf70654a4816f
-
SSDEEP
1536:M7fibEq6u7MA1JKK7r7bChkrtkHLHm9Rf6lAIeZKYvDVtHC:ofibE4jj/bChk669peAI4KYvRlC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09cab783ed326d59f29b681d9f15e517
Files
-
09cab783ed326d59f29b681d9f15e517.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.packed Size: - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2.w05cf9 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
matzaxry Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
s5cemqpl Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
r.4a2d1h Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6rv2wv75 Size: 14KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE