Static task
static1
Behavioral task
behavioral1
Sample
9861dc9212ed8f04fd6060034354303e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9861dc9212ed8f04fd6060034354303e.exe
Resource
win10v2004-20231215-en
General
-
Target
9861dc9212ed8f04fd6060034354303e
-
Size
76KB
-
MD5
9861dc9212ed8f04fd6060034354303e
-
SHA1
871e504ef6736d71218d15f8113c148441acb1c0
-
SHA256
c649f5763dca8bce38627b0ae95439faf24727f1a3b372c30527c9734770b663
-
SHA512
a0748d624cacd6bc0ff42f89f7c4bcfea4910c9d6352cbb0de9acd3f11dcbc49167e14456da0bf5b9daa6c69f42560993c527d89a1365cbb31abe4c540d01a46
-
SSDEEP
1536:PnprKG2LbG1qg1sKinlo8l+z9AXy91gFiBM2z0jLL:FKGwbG7diczky91gFiBM2oP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9861dc9212ed8f04fd6060034354303e
Files
-
9861dc9212ed8f04fd6060034354303e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE