Static task
static1
Behavioral task
behavioral1
Sample
9a4cb7f53d9badaf010ef0c6d95d35da.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9a4cb7f53d9badaf010ef0c6d95d35da.exe
Resource
win10v2004-20231215-en
General
-
Target
9a4cb7f53d9badaf010ef0c6d95d35da
-
Size
512KB
-
MD5
9a4cb7f53d9badaf010ef0c6d95d35da
-
SHA1
9b8d0c7af42758d5d5d3560dff4eb283d78fb54f
-
SHA256
20ea95ea15ddcf0d780a980f08c8d0d5563bae168236939591b7ad49e1ababe2
-
SHA512
ae68bf1769909f884267e6af6b455815f1da028d5e050eda544626dd073de4a7eba17fbe3176e97111e7682b4e65a67bf5ca416568df29cec8524b9ed1a5e380
-
SSDEEP
12288:XSeOTrKI9UYsLWRkKe0WjH72oE0JvhdyrEAiXoBJYsXr:XITZU4R3E3i0JvhdyoAPJYsb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a4cb7f53d9badaf010ef0c6d95d35da
Files
-
9a4cb7f53d9badaf010ef0c6d95d35da.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 804KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 130B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE