Static task
static1
Behavioral task
behavioral1
Sample
1089b40abb4dcce068f2eef1514e51e9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1089b40abb4dcce068f2eef1514e51e9.exe
Resource
win10v2004-20231215-en
General
-
Target
1089b40abb4dcce068f2eef1514e51e9
-
Size
21KB
-
MD5
1089b40abb4dcce068f2eef1514e51e9
-
SHA1
b966411cffb83d5a2f51e6efcfe8e61f7d9bf1ee
-
SHA256
891e098dddcde0084b8a7ec40c3aaf36483af544e890fe54831fb11962dd31af
-
SHA512
a6b23ffadccc780d43b5dda5a183958f050eda994af09997f85db6a45f4db6e84587bee6d2f1c690d18469a49c4a84940959d2963a84d6bdca837487132d61e3
-
SSDEEP
384:20VIMgbb4FMiEJeA54yLnTeiE10JaYTbZMWmrX4zHWA:1gbbnXV54mCcaQmrX4z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1089b40abb4dcce068f2eef1514e51e9
Files
-
1089b40abb4dcce068f2eef1514e51e9.exe windows:1 windows x86 arch:x86
53903bbb39eeb104498c6349be818788
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
fputs
fputwc
fputws
fread
free
freopen
frexp
fscanf
fseek
fsetpos
ftell
Sections
.DATA Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.share Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NewIT Size: 512B - Virtual size: 241B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE