Static task
static1
Behavioral task
behavioral1
Sample
9b848bca3f55bc015959f1d74142b22c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b848bca3f55bc015959f1d74142b22c.exe
Resource
win10v2004-20231215-en
General
-
Target
9b848bca3f55bc015959f1d74142b22c
-
Size
388KB
-
MD5
9b848bca3f55bc015959f1d74142b22c
-
SHA1
39373f9ab732f44c997fab95e77c1a94e297c73f
-
SHA256
47433672db977589321e4a07b7a8058fb65d12a25c0400efbf0bf6ffd66cd04f
-
SHA512
802181108eb4a56137f1ef040df5fb222e021f08f99b48302e14ac75a0fe9262d4f7dcd53e2946ef782ce0deff636c450bae9029e5c050885e771e96d0db6b3a
-
SSDEEP
12288:4T7CWlTJivUsd7+8bP3nCetHQy5fJ1GLh:W7CWlTJissd7+8OgHQy5Sh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b848bca3f55bc015959f1d74142b22c
Files
-
9b848bca3f55bc015959f1d74142b22c.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 281KB - Virtual size: 281KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c2r Size: 512B - Virtual size: 320B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ