Static task
static1
Behavioral task
behavioral1
Sample
9a0c3a68afc3463f23168a12ca5bf5e5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9a0c3a68afc3463f23168a12ca5bf5e5.exe
Resource
win10v2004-20231215-en
General
-
Target
9a0c3a68afc3463f23168a12ca5bf5e5
-
Size
308KB
-
MD5
9a0c3a68afc3463f23168a12ca5bf5e5
-
SHA1
c7b54d01962e0791f662d82cb35823fa91f27b94
-
SHA256
44eac193581874a94b8703c626f14c19e8eecf1118ee23fb2e6e9e6d059f40db
-
SHA512
cd7ba77fd07b69ea57c14c9fbe9c4c38df1d07ab36716674deb0a72ca5811da5c290a0948853642579b7ef074f883443d21d999dde30237d6116d75e99d1f2fd
-
SSDEEP
3072:BVHgCc4xGvbwcU9KQ2BBAHmaPxiMoUb5E:0Cc4xGxWKQ2Bonx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a0c3a68afc3463f23168a12ca5bf5e5
Files
-
9a0c3a68afc3463f23168a12ca5bf5e5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 108KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE