Static task
static1
Behavioral task
behavioral1
Sample
9b3bedab4797bb6647249382464a1801.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b3bedab4797bb6647249382464a1801.exe
Resource
win10v2004-20231215-en
General
-
Target
9b3bedab4797bb6647249382464a1801
-
Size
416KB
-
MD5
9b3bedab4797bb6647249382464a1801
-
SHA1
cd2dee5b3eb233bd66e183da2b3c3b8b90eb2f36
-
SHA256
3e62e4f0003d577be956282656a6ded65bdbc50059e53e44530f9deff8867f85
-
SHA512
0f7773a9fdbb46f60a169029adc78408e6d3182aa077950e4ae49c043849ee9c436b87c89b9d2e5a21d5e9cea6354ba2f4aae1cf91f8f9b1ba724947a6d667ff
-
SSDEEP
3072:eNLNW7dEvotvXWnioA3aaTXelX1m4rW2:eNLNW7mvICNt647
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b3bedab4797bb6647249382464a1801
Files
-
9b3bedab4797bb6647249382464a1801.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE