Static task
static1
Behavioral task
behavioral1
Sample
9888d40a59e2d277a85f600ee8ecd35c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9888d40a59e2d277a85f600ee8ecd35c.exe
Resource
win10v2004-20231215-en
General
-
Target
9888d40a59e2d277a85f600ee8ecd35c
-
Size
35KB
-
MD5
9888d40a59e2d277a85f600ee8ecd35c
-
SHA1
8fdf5d2bf905a1b458f25e452120aa778e5c69c2
-
SHA256
75855b971e2d3706671145100609e594d40edd1b7d70c555b70459194b27b0fb
-
SHA512
916b96e5cbb7f2f4cb11840db7e2efbdbc244a94cba0b9e1f85b512b826616353b735562ebe4927de009373bc6fd57f11d37ab8b2f12fc87f59378777d2f3102
-
SSDEEP
384:0+rxshyR+J4pFOVmGCKIyLmiEU6b/0yOCGnNNNGfMmVfhrE58Lt3dcfI:9rxeQ+mpFOVmH5yHEU6TUCENNDWy5S3f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9888d40a59e2d277a85f600ee8ecd35c
Files
-
9888d40a59e2d277a85f600ee8ecd35c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pepack Size: 22B - Virtual size: 22B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mumaba Size: 22B - Virtual size: 22B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pepack Size: 22B - Virtual size: 22B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 22B - Virtual size: 22B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
520xh Size: 22B - Virtual size: 22B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ