Static task
static1
Behavioral task
behavioral1
Sample
9787bc075ec5fc5a54172defc5a86c5e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9787bc075ec5fc5a54172defc5a86c5e.exe
Resource
win10v2004-20231222-en
General
-
Target
9787bc075ec5fc5a54172defc5a86c5e
-
Size
80KB
-
MD5
9787bc075ec5fc5a54172defc5a86c5e
-
SHA1
8319bd30a36a5f9638ff44d6cfdb91b754bf76ea
-
SHA256
36f00d3cd8b5d1286274dc14d41ba54068edf7aa9bbe1cc831d0f1f1a6659070
-
SHA512
9bb65b2f9169ec146d3557301104a2ec3e7119fdaa6d10f762acd7bd98d9e5cb8aa26a1b7762c99600e22fc5f3e974ac69d2bb68430123a0de65af6dc8b239e1
-
SSDEEP
1536:BCUlODPR60XIcnh1DthfvKeIPQKvfmMBK/AwkKrluS:8U040fBh3bUxBK/PrU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9787bc075ec5fc5a54172defc5a86c5e
Files
-
9787bc075ec5fc5a54172defc5a86c5e.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
.pelock Size: 47KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: 7KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE