Static task
static1
Behavioral task
behavioral1
Sample
9b2ca179af99dceaa86a748ae1e64fe9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9b2ca179af99dceaa86a748ae1e64fe9.exe
Resource
win10v2004-20231222-en
General
-
Target
9b2ca179af99dceaa86a748ae1e64fe9
-
Size
66KB
-
MD5
9b2ca179af99dceaa86a748ae1e64fe9
-
SHA1
8312c2027da44e6e04a1fb6b26be712857a4117c
-
SHA256
38d40b6cce0fd850c253d35deba4136ef3651d88ec71bd3d060e34dc70f2f85b
-
SHA512
e8acd8a82f375c092cf4742e330a88048e67fb0d6ca510e03d11862b1ace9666f92a221318c1a45ad880fc4cfd67cbae2b2ce716924a464a9c8b64811f4186de
-
SSDEEP
1536:f1d62J9lEppXOnUmAN4+EhVnIxFOh2FUUUrBmyykTWB+lTgH3:n6wvELOnUh4+EYxMhWUUUr6kyMlTG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b2ca179af99dceaa86a748ae1e64fe9
Files
-
9b2ca179af99dceaa86a748ae1e64fe9.exe windows:4 windows x86 arch:x86
70d582c78bddbb328e076840c3b2dc29
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadIdealProcessor
GetFullPathNameA
GetBinaryTypeW
SetThreadLocale
GetConsoleProcessList
PeekConsoleInputA
EnumCalendarInfoW
IsSystemResumeAutomatic
GetProfileIntA
GetEnvironmentVariableA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE