Static task
static1
Behavioral task
behavioral1
Sample
9a1f3612843fdf6c5c218170ee903d67.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9a1f3612843fdf6c5c218170ee903d67.exe
Resource
win10v2004-20231222-en
General
-
Target
9a1f3612843fdf6c5c218170ee903d67
-
Size
117KB
-
MD5
9a1f3612843fdf6c5c218170ee903d67
-
SHA1
035bb9ee0b05e3052020e338986786070743d549
-
SHA256
14b77ce9d10faf054f4b7b628a07a4cc89beae4cd917327727cf8b018ae10a32
-
SHA512
81d21aa97a3c2660e7385a433e7b24ed5f09b16b58e3976ea840110cd965790803be06a04282ffbd61a3ef76b7c7def137d0b2852d07b5060605e3f01b2f5d73
-
SSDEEP
768:F+fcg5h8X8xK3owwuzOPJaHBf31s6GdZ/LboCEifiS+EyN2hHjt5Cx3:IUq9xyow3OPAnsxD/LlqS+SHj3Cx3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a1f3612843fdf6c5c218170ee903d67
Files
-
9a1f3612843fdf6c5c218170ee903d67.exe windows:1 windows x86 arch:x86
86ace1baa0963fb0f2247639f0ee491a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
UnhandledExceptionFilter
SetLastError
GetModuleFileNameA
LoadLibraryW
SetEvent
FreeLibrary
GetCommandLineA
LoadLibraryW
HeapAlloc
LocalFree
HeapAlloc
lstrcmpiW
CreateThread
UnhandledExceptionFilter
GetLastError
lstrlenW
WaitForSingleObject
LoadLibraryW
EnterCriticalSection
GetProcAddress
CreateThread
LoadLibraryW
WaitForSingleObject
LeaveCriticalSection
Sections
.data Size: 102KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE