Static task
static1
Behavioral task
behavioral1
Sample
9befb79c877313c6ae8cd7cccb9a8fe1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9befb79c877313c6ae8cd7cccb9a8fe1.exe
Resource
win10v2004-20231222-en
General
-
Target
9befb79c877313c6ae8cd7cccb9a8fe1
-
Size
59KB
-
MD5
9befb79c877313c6ae8cd7cccb9a8fe1
-
SHA1
c670cb99dadf15ee1a5e54239507142fa698305b
-
SHA256
8d8c848f8f663fb518507c53ffa4529e6b2d0e193e1d968e1be133c7131ee106
-
SHA512
0977c100b7e7c7f9e6340a29de7c3d2b698e02864fa734da83c8c46d22f704765ba966bc82b432d97d93e46e68056c96502c806d479628756517f3dcad52e629
-
SSDEEP
1536:rJL8JJ0yjjWqQnuk3pPm3ihUUEo36VrxSaKfIeb:rh8JJ0yjjWqUuk00GxafI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9befb79c877313c6ae8cd7cccb9a8fe1
Files
-
9befb79c877313c6ae8cd7cccb9a8fe1.exe windows:333 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
byjzbyja Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
yayarabr Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iazzzari Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
byqabijr Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ