Static task
static1
Behavioral task
behavioral1
Sample
9a2bd3e1d5fd6bb251b10755a311a1b7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9a2bd3e1d5fd6bb251b10755a311a1b7.exe
Resource
win10v2004-20231222-en
General
-
Target
9a2bd3e1d5fd6bb251b10755a311a1b7
-
Size
122KB
-
MD5
9a2bd3e1d5fd6bb251b10755a311a1b7
-
SHA1
bbade3b83d76282d08b8c5fa8b76ce60fac904da
-
SHA256
2a92fe135120721db7627329bc3799b4b0fe0ed86d055b0aa149309e88a0e11e
-
SHA512
04ae2d8efbb9654e8cd476cfef3bfa36bff6b575e675032664c24340533ac3a20ea731007a88e078b93c7205c1a87f2c8e5fa827d4cae1a31bf27c9e1e234848
-
SSDEEP
1536:Q4V9cwNffYViYEtFXDq/uryPQch6epLl+2De6ef9CCFd1wq/hFSguzXtXHtqdebt:Q4d38ItFXwhCoX4lCCnZkzXtXT8fVudV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a2bd3e1d5fd6bb251b10755a311a1b7
Files
-
9a2bd3e1d5fd6bb251b10755a311a1b7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ns5tjn Size: 1KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 923B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.packed Size: - Virtual size: 3.0MB
.loader Size: - Virtual size: 416KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.engine Size: 118KB - Virtual size: 120KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE