Static task
static1
Behavioral task
behavioral1
Sample
9b36b956841de670eb7e373f9f4f299b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b36b956841de670eb7e373f9f4f299b.exe
Resource
win10v2004-20231222-en
General
-
Target
9b36b956841de670eb7e373f9f4f299b
-
Size
314KB
-
MD5
9b36b956841de670eb7e373f9f4f299b
-
SHA1
052be17e47f2c70dad419773fba9c6fc664d91b1
-
SHA256
a1e4d9d27fb0c91870173120f819c0f94619a8cc1226f347ab43a5a3a0da9f04
-
SHA512
3ad5e1951df74dcddcfcd7c765355c4875a6600b3db5f30b6afaaaa99eeb303d988d5297f9ba8842228e115b5251c8089bd370fde5fbbf874f0992194f60ab67
-
SSDEEP
6144:FDNKdXscHzAb/D5tBA+frsg3hZDQUSQX8u+y6xi:5NKdX1Hkb/D5w+vhZkfhxi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b36b956841de670eb7e373f9f4f299b
Files
-
9b36b956841de670eb7e373f9f4f299b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 14KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE