Static task
static1
Behavioral task
behavioral1
Sample
9991e448db2fc675cb55159868907a04.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9991e448db2fc675cb55159868907a04.exe
Resource
win10v2004-20231215-en
General
-
Target
9991e448db2fc675cb55159868907a04
-
Size
952KB
-
MD5
9991e448db2fc675cb55159868907a04
-
SHA1
2dfe0e6a12f7aa6f5157654a715923131ac190aa
-
SHA256
0edf34cff6415ca3d16dbfd0d2aeed94223c22f9351ac677598bec233acb852e
-
SHA512
a8631ba4e52677f156d272ffc5ed29e619f282c3ae26f7d3b7ad2ea6419bed93542ea30551e683d43aae5d7c38668664164ace1ee02f971d985a5711c9a72012
-
SSDEEP
24576:egmsooY8FafQqe4rBuNF8YbiTfyj3C+0tlmZXByaRzVDnTDGOS:evK8dyjCTtlmhXZTjS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9991e448db2fc675cb55159868907a04
Files
-
9991e448db2fc675cb55159868907a04.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ymedhodu Size: 902KB - Virtual size: 904KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
apqlbmhz Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE