Static task
static1
Behavioral task
behavioral1
Sample
9a194e6da64e14e232187c91046f293d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9a194e6da64e14e232187c91046f293d.exe
Resource
win10v2004-20231222-en
General
-
Target
9a194e6da64e14e232187c91046f293d
-
Size
480KB
-
MD5
9a194e6da64e14e232187c91046f293d
-
SHA1
fde04c5f6e75bb6c00427155c44b89d234192c10
-
SHA256
7389705a09d914c1abb89f1fba8d2e14c46b3054e9846fa212986c0c858730ae
-
SHA512
c9d2d5af4fb8abfe12d2d0c9dd2aac6645724c7301a0533b04e09b17e7259ad8c4e9ca584d242e641572cfd4df078a6422980c86a7363e60d63e6ac4ccf61400
-
SSDEEP
12288:6CGm/+dRMS5CAqfDA5Yc/Uc4QwLjEhbEiqthDxzKey:6C4NqLA5rsewLjEtqthDh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a194e6da64e14e232187c91046f293d
Files
-
9a194e6da64e14e232187c91046f293d.exe windows:4 windows x86 arch:x86
334b3da1d1ab6ebad89d9b26d4395034
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
GetAltMonthNames
ntdll
NtIsProcessInJob
ws2_32
WSACancelBlockingCall
kernel32
GetCommandLineA
user32
GetKBCodePage
GetActiveWindow
Sections
.text Size: 476KB - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 163B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE