Static task
static1
Behavioral task
behavioral1
Sample
9a59d9f3b9702c42bd0714ce14f89f0f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9a59d9f3b9702c42bd0714ce14f89f0f.exe
Resource
win10v2004-20231215-en
General
-
Target
9a59d9f3b9702c42bd0714ce14f89f0f
-
Size
8KB
-
MD5
9a59d9f3b9702c42bd0714ce14f89f0f
-
SHA1
b6af13980414392c8893c681f6610035e3ad3793
-
SHA256
e574708d669d68f16d58f3c65577289b933bd9799ce7a4c33f5d217aee9d4921
-
SHA512
a3f9634d717ef07b646884f7c9ad638da9b2db90131f7ab94b39b78608f0a59344cd0270bd37cc96e5d3b1ed22daa41194a4a467707e05f3c6b359f5df519df3
-
SSDEEP
192:rpZ1T3alOZcd7DpC9x54vluZXaJEIE1qdqfdJMtc3xLDyEp:9DT3LZcd716xJYJc10qfOc3xfyA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a59d9f3b9702c42bd0714ce14f89f0f
Files
-
9a59d9f3b9702c42bd0714ce14f89f0f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ