Static task
static1
Behavioral task
behavioral1
Sample
9bff46b12213979936accb876dfc9463.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9bff46b12213979936accb876dfc9463.exe
Resource
win10v2004-20231215-en
General
-
Target
9bff46b12213979936accb876dfc9463
-
Size
59KB
-
MD5
9bff46b12213979936accb876dfc9463
-
SHA1
f1e5a4c0fadd46377c5c116d3bc00671afa127ee
-
SHA256
526faa6d93fe7749628e03a3873174968a63e6afc0966669aaf43be95056471c
-
SHA512
060bc966d761416070aed9bd267a2e76f430a7d8aa642c2737e2c9d6c10786220af87d09cdc397392739865d59ff404ca8154d31c0811e86859a408a07b15b5a
-
SSDEEP
768:407gxAl3FqqlsCv5wp8ZfPI15osMv3gyYj51jdyrQPfgmq2j8BvC/:rYWl5v5wp8ZfIoVoLPfgmq2j8BvC/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9bff46b12213979936accb876dfc9463
Files
-
9bff46b12213979936accb876dfc9463.exe windows:4 windows x86 arch:x86
f2e0f6e25b2cadc4d8fb42a127053460
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
CreateProcessA
LoadLibraryA
SetEndOfFile
SetFilePointer
GetProcAddress
FreeLibrary
lstrlenA
GetCommandLineA
GetVersionExA
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
ReadFile
user32
wsprintfA
advapi32
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE