Static task
static1
Behavioral task
behavioral1
Sample
9b15a9e5e8c388828255d30f5bf9a6d2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b15a9e5e8c388828255d30f5bf9a6d2.exe
Resource
win10v2004-20231215-en
General
-
Target
9b15a9e5e8c388828255d30f5bf9a6d2
-
Size
544KB
-
MD5
9b15a9e5e8c388828255d30f5bf9a6d2
-
SHA1
cfbc23f02f3760fca2940a89d7842c5bcd9a118c
-
SHA256
6fc976b60f9e230b3f14aa993b9dd84ce18f6108a4b3c9b0652e836eafd423f3
-
SHA512
769240aefc01a3bafc4034299a7e386acafba09d530a2bb0bdcc069670dbabea03e1f7086e51b627a286d7b6f996f102e505ac26b015a8afcf7aae89e0b6edbe
-
SSDEEP
12288:zaOPp8kAtAZCL+M3SgKEPGu/BQLtCRTydfnErlLbORpLlTweR2NriEB:stAoCuSgK692LtCNyd/7RTbRarB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b15a9e5e8c388828255d30f5bf9a6d2
Files
-
9b15a9e5e8c388828255d30f5bf9a6d2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 153KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 642KB - Virtual size: 920KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 317KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE