Static task
static1
Behavioral task
behavioral1
Sample
9b291e6c632955ab473e590c91e657ab.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b291e6c632955ab473e590c91e657ab.exe
Resource
win10v2004-20231215-en
General
-
Target
9b291e6c632955ab473e590c91e657ab
-
Size
75KB
-
MD5
9b291e6c632955ab473e590c91e657ab
-
SHA1
22fa2f0fc6a1473165de93fba5d42ae86ba10cae
-
SHA256
d80d5c6767044f712fe59145be3036d4b501e8389cd41cec0e51916790a84c6d
-
SHA512
447fd428bbc7b83e8c14dde766145c7540db18ec0089fa406faec69c62a847f926b51ff00b4a0decefc2a8c43ddf6816503675bfd542f450efcba65404e1bae5
-
SSDEEP
1536:KRWFmTRwNdM4yi+hUIkgJx/THN7fT6dnLQe1I8uaa5zvkNE:sa43hU/gJxJfGJLynBvkNE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b291e6c632955ab473e590c91e657ab
Files
-
9b291e6c632955ab473e590c91e657ab.exe windows:4 windows x86 arch:x86
f356998a475546ecf2a443bb46763aa9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
exit
_iob
_adjust_fdiv
strchr
__set_app_type
atoi
strcmp
sin
fopen
_strnicmp
fprintf
free
memmove
__p__commode
fwrite
fclose
__getmainargs
_XcptFilter
__p__fmode
__setusermatherr
_acmdln
_exit
_onexit
strlen
_initterm
malloc
_except_handler3
user32
GetDesktopWindow
kernel32
GetStartupInfoA
GetModuleHandleW
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ