Static task
static1
Behavioral task
behavioral1
Sample
9885834c70bfe5756d6fca295b006840.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9885834c70bfe5756d6fca295b006840.exe
Resource
win10v2004-20231215-en
General
-
Target
9885834c70bfe5756d6fca295b006840
-
Size
180KB
-
MD5
9885834c70bfe5756d6fca295b006840
-
SHA1
8068072c06dcf4cb6d2a13d29094c2ed9d0d3a42
-
SHA256
b181a3bf920c5b1c2baaa8f55cc542fbacac7b1fa706beb4aed857fdc7ed1fe8
-
SHA512
0cd86a16c80b1758a2fc7ec078e253644d658d49dee7a2f708a1f7d1be423555022b977fa1cfa4d12a587d8f02d832abebc895760f4d8603c57c5f3c03e44338
-
SSDEEP
3072:9pTS+xhMY78I8HAgXcTySeugTCvRsuEId5ej9iR2mCWzgg+M7AI1SrnN55wkh1mC:9pTjxL78DAgMTlUCv9EId5ej9IRfzgbF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9885834c70bfe5756d6fca295b006840
Files
-
9885834c70bfe5756d6fca295b006840.exe windows:4 windows x86 arch:x86
f57893fd57fdf1b7807d9d0224ceb675
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strcpy
strcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
strcat
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strlen
__setusermatherr
memset
kernel32
GetModuleHandleA
GetStartupInfoA
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 548B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE