Static task
static1
Behavioral task
behavioral1
Sample
9c1aa0f7c9869eb540e34524740b597d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9c1aa0f7c9869eb540e34524740b597d.exe
Resource
win10v2004-20231222-en
General
-
Target
9c1aa0f7c9869eb540e34524740b597d
-
Size
452KB
-
MD5
9c1aa0f7c9869eb540e34524740b597d
-
SHA1
76fcdd81b5957551e8ae84162afad703c867e07b
-
SHA256
0525a755248709afb67782dfc2457e2fa12f1919f898f53c037a2b0ac2ed1b30
-
SHA512
bf26d1dad65452b2bd2e4bff9e4d11cfe1b87fc9b793d26963e5527e898a899ae25881ba6ad58bef25ef370f493b2bcafe9e0799a5fd67a9c5aa4134060c4e62
-
SSDEEP
3072:HL7kKCMb+y589nAhX+UM/Blg/OZyVoL2Yg71PbKnK+T+CIHL7rtBj1rU0twVrmz:cKN+R9nAhX+UMVzO5gK+T+CoC0twxY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c1aa0f7c9869eb540e34524740b597d
Files
-
9c1aa0f7c9869eb540e34524740b597d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text0 Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE