Static task
static1
Behavioral task
behavioral1
Sample
9b79c030affc71f8d29db80a21a57021.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9b79c030affc71f8d29db80a21a57021.exe
Resource
win10v2004-20231222-en
General
-
Target
9b79c030affc71f8d29db80a21a57021
-
Size
21KB
-
MD5
9b79c030affc71f8d29db80a21a57021
-
SHA1
b9fcb59b17435fa7f4637bc3797302558e9e9b38
-
SHA256
0c4a3b0b6a724117583290d989be7fd499cae0d4f78418c27b4c79e28a6ca34c
-
SHA512
8ded28f2132bfd8be40402da23d19b7420fb10f93055c805a826dd04fc6a783c90a8d365697e27780d572016d7ca09f19484e7a99a80a6da9fac2a37cc85a107
-
SSDEEP
384:AJLQZktj1fSMLDo0yE0e6x9wGpvGx9tqHgjU0HblkXnYrNwJdLNR:AaYVZMjje6w4ezL5H5kXYmj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b79c030affc71f8d29db80a21a57021
Files
-
9b79c030affc71f8d29db80a21a57021.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ziyue! Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.373250 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE