Static task
static1
Behavioral task
behavioral1
Sample
9c21bd4f40f94e5bb3f78451174eddd8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9c21bd4f40f94e5bb3f78451174eddd8.exe
Resource
win10v2004-20231215-en
General
-
Target
9c21bd4f40f94e5bb3f78451174eddd8
-
Size
644KB
-
MD5
9c21bd4f40f94e5bb3f78451174eddd8
-
SHA1
a81715dd688605f261c0ea95a6535592fa1308aa
-
SHA256
11c2b950d15922f5c25fefbfb6014c3dadcd9862bd356bde9b58bf2922c9419a
-
SHA512
8f0ac05c4341c9509d4cb9ca93ad5c961484d4c995631cad66aca621d0c47c50d5d742bbaf36a978bd659840fa13e062cf306df5603cc951ac809a13db44909f
-
SSDEEP
12288:PE/IfiEjKvjYv6E/IfiEjKvjYv6E/IfiEjKvjYv6E/IfiEjKvjYvCw:PEyilvjy6Eyilvjy6Eyilvjy6EyilvjS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c21bd4f40f94e5bb3f78451174eddd8
Files
-
9c21bd4f40f94e5bb3f78451174eddd8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 615KB - Virtual size: 614KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zjiwzvt Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE