Static task
static1
Behavioral task
behavioral1
Sample
9ae48d9fed553b7fc24884fc309c38da.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9ae48d9fed553b7fc24884fc309c38da.exe
Resource
win10v2004-20231215-en
General
-
Target
9ae48d9fed553b7fc24884fc309c38da
-
Size
223KB
-
MD5
9ae48d9fed553b7fc24884fc309c38da
-
SHA1
c4347c6b7e3882a8a3d47d538d96b7049546b606
-
SHA256
bd2b01af8dea2e3c2267e035585bc01782e969e05e845183054034780b4a7093
-
SHA512
608f5240bbaa8274b1c8244380746897f31f17c4fdb3f139ac069722d3311b7fb1c27f3dc846bd8a9f8c66b5f895926c0c45b72a76e56792e38b11fc73ffe14b
-
SSDEEP
3072:xgAm9q/FaMTDPNtYH0PxcNFMN5lt7jKOQTppz19WOZtigqpD/9x8kl1+BOQnMLjH:r1oUxcN+t7yp1PWOZtq/9kBOQnMLjH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ae48d9fed553b7fc24884fc309c38da
Files
-
9ae48d9fed553b7fc24884fc309c38da.exe windows:4 windows x86 arch:x86
927aac2d0c4fb3b4737429f3cdf66991
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetLastError
ReadConsoleA
GetCPInfo
ExitThread
ReadConsoleA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ