Static task
static1
Behavioral task
behavioral1
Sample
9966b2fb80bd1d6945850d9e1e6c9b8b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9966b2fb80bd1d6945850d9e1e6c9b8b.exe
Resource
win10v2004-20231215-en
General
-
Target
9966b2fb80bd1d6945850d9e1e6c9b8b
-
Size
11.6MB
-
MD5
9966b2fb80bd1d6945850d9e1e6c9b8b
-
SHA1
70bd15aa034ca608e804a239d776efb5adf6dcd0
-
SHA256
8c4925463689d4ead2b63fa55d5b0653455162b0da2fe1a5919fa63094a65816
-
SHA512
c85507a760fdc57e61e28e4bb5c4fae5591da1e828e1fd351a93709b54a5c465572ee59c529cbb6615ad1294dad9a6210f0d83328eb7df8b176bf5f1abecad78
-
SSDEEP
98304:xfsgeu9L+xJVBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBI:91exr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9966b2fb80bd1d6945850d9e1e6c9b8b
Files
-
9966b2fb80bd1d6945850d9e1e6c9b8b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 350KB - Virtual size: 932KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 361KB - Virtual size: 10.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE