Static task
static1
Behavioral task
behavioral1
Sample
9b4dcc03e57b27dc615eb06d68cc79ff.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b4dcc03e57b27dc615eb06d68cc79ff.exe
Resource
win10v2004-20231222-en
General
-
Target
9b4dcc03e57b27dc615eb06d68cc79ff
-
Size
114KB
-
MD5
9b4dcc03e57b27dc615eb06d68cc79ff
-
SHA1
103377eb3eaf2031ba977f28b73f08c12d38b887
-
SHA256
fb41b57e70ae688793303c42a216f9d72aa7c4d9fa8630dc5e9a970fb99ea870
-
SHA512
61f7a98ade3af94d7ad050b0efdcdb5d15624f2db1c4ee4e956cfade38574bfb3fc35b6b6b7692b05dfe01c02e79c96a80fb1cfa3ef8c5d30613b91bc487b668
-
SSDEEP
3072:KjdgESTjzbA5ijK32EpYeu9TDXytAMas8CjPHw:7LBvHBS/PQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b4dcc03e57b27dc615eb06d68cc79ff
Files
-
9b4dcc03e57b27dc615eb06d68cc79ff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
9sznk7y4 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tmdm5fs Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
42 Size: 814B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE