Static task
static1
Behavioral task
behavioral1
Sample
9a9ba2c72ca0af407c15392057ada64284b03745774036702ce3ac17a0b1089a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9a9ba2c72ca0af407c15392057ada64284b03745774036702ce3ac17a0b1089a.exe
Resource
win10v2004-20240221-en
General
-
Target
9a9ba2c72ca0af407c15392057ada64284b03745774036702ce3ac17a0b1089a
-
Size
152KB
-
MD5
d02f793565e601cf6bc9fce1959f3a0a
-
SHA1
5f071443bf696fff2536689369357fe086e284c0
-
SHA256
9a9ba2c72ca0af407c15392057ada64284b03745774036702ce3ac17a0b1089a
-
SHA512
2c0b5cd31daaa5d36fe806ff7d1869db70f5b5c07611147992f5109029998ba372cfe0fe91ada5c10c0f63b8765b256c4cade3eb124979fb3db2393f561d64b0
-
SSDEEP
3072:8ftffjmN4wHunvMbguKMkDEjguKMkDEkH:EVfjmNjH0vMbgNEjgNE0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a9ba2c72ca0af407c15392057ada64284b03745774036702ce3ac17a0b1089a
Files
-
9a9ba2c72ca0af407c15392057ada64284b03745774036702ce3ac17a0b1089a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE