Static task
static1
Behavioral task
behavioral1
Sample
9b4689ac5b28e8ab79fea10c847498d4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b4689ac5b28e8ab79fea10c847498d4.exe
Resource
win10v2004-20231215-en
General
-
Target
9b4689ac5b28e8ab79fea10c847498d4
-
Size
2.0MB
-
MD5
9b4689ac5b28e8ab79fea10c847498d4
-
SHA1
1f43e291afd1f4a38aa35f73f47200a3ffa0652c
-
SHA256
ca55c4612d0e883e6c7a1403225c26792d161e208c99819a6e5cb752eaba6a12
-
SHA512
ad827ca8b755632e5bb9c250139eee34af82eff333701001c351e5a289fb6c5dab240d3be5ca97a88db02e86563753e84028400223a38c1998a064fa42310c84
-
SSDEEP
24576:lmYkdGMRohsoA8/xUByJDKTD09m5ftthpfVXal9FTzvvMzvvbyT:fMOk6FAD0I5fttbdal9FTzvvMzvvm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b4689ac5b28e8ab79fea10c847498d4
Files
-
9b4689ac5b28e8ab79fea10c847498d4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 696KB - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 160KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ