Static task
static1
Behavioral task
behavioral1
Sample
9907a994d831449426a63cd093469fb0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9907a994d831449426a63cd093469fb0.exe
Resource
win10v2004-20231222-en
General
-
Target
9907a994d831449426a63cd093469fb0
-
Size
31KB
-
MD5
9907a994d831449426a63cd093469fb0
-
SHA1
15390daf44a42e707acf219ad1798fac2e4f7c65
-
SHA256
a581f2604b195d0c4d080f91b1270dacfca390b232c350aacfdb26e781bdc14a
-
SHA512
a585364d82a5d7a734f12e81943cd82726c7e8456ca82db7f87594532b5cf50b8c1a22dc4cd381911c8d0619278fefa169085fd6e815e32466570eccb25b5123
-
SSDEEP
768:OrTX2SVXpQYZHHebdBz7UWNRKYKlFbTPCr29KAB25T:OrC4XpQwHHezz7UWNRVSI2UAa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9907a994d831449426a63cd093469fb0
Files
-
9907a994d831449426a63cd093469fb0.exe windows:4 windows x86 arch:x86
21736dd5fbfe66451dc26235d4b3e374
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
ReadEventLogA
InitiateSystemShutdownW
RegisterEventSourceW
kernel32
EnumDateFormatsExA
GetSystemInfo
GetLongPathNameA
user32
WinHelpA
MoveWindow
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE