Static task
static1
Behavioral task
behavioral1
Sample
9816946e38fa704a70fe292a9065a79e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9816946e38fa704a70fe292a9065a79e.exe
Resource
win10v2004-20231215-en
General
-
Target
9816946e38fa704a70fe292a9065a79e
-
Size
326KB
-
MD5
9816946e38fa704a70fe292a9065a79e
-
SHA1
477d365891819c900c1974d0809e16c338e209ae
-
SHA256
7d7412a1af2151f77944296196b0b7a50c4824e17be9508eaee56122a75e4a75
-
SHA512
12fa76440427eda90bf747d9fd3226fecd47b30b09adff9ab95624c748accb8789ae73eca1e342905e81be8175be05697bc1387f175383c927c343385fdd5d09
-
SSDEEP
6144:Vnn+TyiPmWlSoeOHPBW8DAJkmKoPa8vm:V+XFSoeW5W8Uemhvvm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9816946e38fa704a70fe292a9065a79e
Files
-
9816946e38fa704a70fe292a9065a79e.exe windows:4 windows x86 arch:x86
65b6862e9898b195f4ef7a1685fd82dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
memset
comctl32
InitCommonControls
user32
MessageBoxA
shell32
ShellExecuteExA
ole32
CoInitialize
Sections
. Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE