Static task
static1
Behavioral task
behavioral1
Sample
109b9f47e49839b9d4008084cee8932a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
109b9f47e49839b9d4008084cee8932a.exe
Resource
win10v2004-20231215-en
General
-
Target
109b9f47e49839b9d4008084cee8932a
-
Size
46KB
-
MD5
109b9f47e49839b9d4008084cee8932a
-
SHA1
873922429f881b950d30f46b837e097a80758e91
-
SHA256
5d6545986670407698a7f114c90ae0a9b54e497e3b22cad58386af7122825714
-
SHA512
e7aa4b4582887e9c1e7854a28320564c8fa307ea2a9b164083d3ac90fd0d6ac68487c1807a734bede1b2a89bafc7a1b042c38456a3fe4c82db0bbad9a4ce5fdf
-
SSDEEP
768:gZE9F4wi14KqqdR5gSXpLbRhxDNhJLdXcP65hC8t2BmC:g6FU14K5dFXPhxD7JL8gFumC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 109b9f47e49839b9d4008084cee8932a
Files
-
109b9f47e49839b9d4008084cee8932a.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.conf Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nah Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE