Static task
static1
Behavioral task
behavioral1
Sample
9b5d6a515f4d36a71e317a6851c3a79d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b5d6a515f4d36a71e317a6851c3a79d.exe
Resource
win10v2004-20231222-en
General
-
Target
9b5d6a515f4d36a71e317a6851c3a79d
-
Size
101KB
-
MD5
9b5d6a515f4d36a71e317a6851c3a79d
-
SHA1
de9ee755461f0e12b8a0ed12e04ee4f62539d4d5
-
SHA256
a94b20cac7f2b564468ad41b0e61f5e2263357e837a493096799f08d9ed802ad
-
SHA512
839d81acdf619c47d637f2edd3a810360fc753be0d346ae64d18246ccefbdbf09f1b01cdb234f6aa48a50df878553a4dbcaa56fc67de7943c8c4a03926a719d6
-
SSDEEP
3072:K4iYJCr72gcDYJJJJ0JJJJJJJJJJJPJJJJJJJJk/8rBA/I:riYJqygcDYJJJJ0JJJJJJJJJJJPJJJJd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b5d6a515f4d36a71e317a6851c3a79d
Files
-
9b5d6a515f4d36a71e317a6851c3a79d.exe windows:4 windows x86 arch:x86
32ca8d5fca836efa8536566f0eee05c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
CreateThread
VirtualAlloc
VirtualFree
ExitThread
GetSystemDirectoryA
CreateFileA
WriteFile
CloseHandle
FreeLibrary
GetFileTime
CompareFileTime
GetModuleFileNameA
GetCommandLineA
Sections
BitArts Size: 49KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE