Static task
static1
Behavioral task
behavioral1
Sample
109f02ee0950362319812ae949bd4a42.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
109f02ee0950362319812ae949bd4a42.exe
Resource
win10v2004-20231215-en
General
-
Target
109f02ee0950362319812ae949bd4a42
-
Size
357KB
-
MD5
109f02ee0950362319812ae949bd4a42
-
SHA1
4d9092f69c393ca957c3ef3d02d9345e3f85f889
-
SHA256
ea8fab834688c888e2d4b8b4c26832e7a9f49034c018f1ec04bbe06d338c518b
-
SHA512
99aed6d839c6e918bc5be47346aa715b98002dfcb851d62eb908b4bad5e2768ba324231bbc6cc3eab84582da20dd6e5ceb6e7264b4eef1fcded969a58740f159
-
SSDEEP
6144:V14kAy/uXwpuEKC0aWaHtGdgEjVRT0BIBEsm9/tXx9YBg8NAy/3RZo+aiAZZMwai:V1v2ApujKWggd1jbEILU/tw/3RZo/dzF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 109f02ee0950362319812ae949bd4a42
Files
-
109f02ee0950362319812ae949bd4a42.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Amoeba Size: - Virtual size: 630KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Amoeba Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Amoeba Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Amoeba Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Amoeba Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Amoeba Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Amoeba Size: - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Amoeba Size: - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Amoeba Size: - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Amoeba Size: - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ByXueLuo Size: 356KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE