Static task
static1
Behavioral task
behavioral1
Sample
9jbHyL0cNHyasgz.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9jbHyL0cNHyasgz.exe
Resource
win10v2004-20231215-en
General
-
Target
9jbHyL0cNHyasgz.exe
-
Size
690KB
-
MD5
16d5974b5ab26dd85fe097c7f7c430dc
-
SHA1
38fe0b7a26823ec36a05ec05cf7ce9e1bbe501c4
-
SHA256
d3cd8c4c724b78139d2edc50e43022c924255409c720d8437b74e4738534093d
-
SHA512
678dec75cb7597b972cdad0a4d2ea6c39ece7ba8c14b5471b57ebfa57f5c374c72d1034825686a2e8f2791fb18c4793ae87a093f4b74d2a98bade0966295fadd
-
SSDEEP
12288:zqE2iNPBJI30qS90jS+pWqV2h4Kgc9VT2arg9xcMDYynFaajuczRZL6:B1xu0qw0jNpJV2h4Kg2T2JcMDYynFRuI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9jbHyL0cNHyasgz.exe
Files
-
9jbHyL0cNHyasgz.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 687KB - Virtual size: 687KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ