Static task
static1
Behavioral task
behavioral1
Sample
9b9a7d8326d2aabadda4ff37f474ef07.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b9a7d8326d2aabadda4ff37f474ef07.exe
Resource
win10v2004-20231215-en
General
-
Target
9b9a7d8326d2aabadda4ff37f474ef07
-
Size
31KB
-
MD5
9b9a7d8326d2aabadda4ff37f474ef07
-
SHA1
5b63df12317629a3091733105fdbda841d495207
-
SHA256
29422b675ca474af08f659792d86542ed15961124c686011fa544ac10ef2d8d2
-
SHA512
dacf13292e710959d6eb86b2edd32ed6ba0b76038cb785c6e6d17b37e5d82620a9dea45edd9345b9945b317e35293a0c93cffde29ec216fd51f4a59ab4b59d5a
-
SSDEEP
768:xLM5QN/77p8jWaL6Gh3rn/OZYqBbTHMFdawW1iR+fE2c1BCC:xayfejW8Rh7n/SY6DAW1I2c1BC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b9a7d8326d2aabadda4ff37f474ef07
Files
-
9b9a7d8326d2aabadda4ff37f474ef07.exe windows:4 windows x86 arch:x86
e50a21c833d6b1b853158f735fe2a509
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
_controlfp
user32
IsWindow
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
urlmon
URLDownloadToFileA
wininet
InternetCrackUrlA
ole32
CoInitializeEx
oleaut32
SysAllocString
version
GetFileVersionInfoSizeA
gdi32
GetDeviceCaps
Sections
.text Size: 26KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE