Static task
static1
Behavioral task
behavioral1
Sample
a9903a2cc6efc845e4ddf53ca4090a1f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a9903a2cc6efc845e4ddf53ca4090a1f.exe
Resource
win10v2004-20240226-en
General
-
Target
a9903a2cc6efc845e4ddf53ca4090a1f
-
Size
636KB
-
MD5
a9903a2cc6efc845e4ddf53ca4090a1f
-
SHA1
d2f61124c819dba65be6946435786c9b3fc90655
-
SHA256
12f413a6d455a9e9bdedbaf9b84bb15655db3a45fd0e86d248cc1377c9fbc43d
-
SHA512
40944664526aba54c27d3b0cda878b5b3873e587d07500b4ab491d9dab582f5b733f22a957706bc8dc1299873c9ba7f2652973f112bd56447d7a003062793264
-
SSDEEP
12288:BxPfJBGMPm0QroNwxRApSWF9BYUQ2TV5QsJIYKE3RFRB3:n3BPm0QsiEIWFjbKMIYKEFB3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9903a2cc6efc845e4ddf53ca4090a1f
Files
-
a9903a2cc6efc845e4ddf53ca4090a1f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 635KB - Virtual size: 635KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE