Static task
static1
Behavioral task
behavioral1
Sample
9ad6bb1955f538ae62ec7e6ecddbd60d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9ad6bb1955f538ae62ec7e6ecddbd60d.exe
Resource
win10v2004-20231215-en
General
-
Target
9ad6bb1955f538ae62ec7e6ecddbd60d
-
Size
1.5MB
-
MD5
9ad6bb1955f538ae62ec7e6ecddbd60d
-
SHA1
7c1131de323bc60a6077b347e4a2c51b4fbd10c5
-
SHA256
54d9b990b2e9c155742aa66abee7433ce72c88c7cd5222120c4b8ee1485a7cc7
-
SHA512
e26e7efbc76082bab36f85cf28811102fb40437973cfed47a604c0c567710f6c063251256726224b67c3d182ac7e41fce46948c493c6a005f8a34b29f7370f17
-
SSDEEP
24576:mtqGd/8CT4BgWMZYEO3v/nIlhOfJJ/QXgqnAnT/b3iQo4VAej:YWSnYE5f4f/ygqs/3rowJj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ad6bb1955f538ae62ec7e6ecddbd60d
Files
-
9ad6bb1955f538ae62ec7e6ecddbd60d.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 80KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 350KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bwotvvkz Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yqtyadhj Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE