Static task
static1
Behavioral task
behavioral1
Sample
a9bc8d02752e5a00d309d0c2f1131888.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a9bc8d02752e5a00d309d0c2f1131888.exe
Resource
win10v2004-20240226-en
General
-
Target
a9bc8d02752e5a00d309d0c2f1131888
-
Size
348KB
-
MD5
a9bc8d02752e5a00d309d0c2f1131888
-
SHA1
08629059172a7e3e00cf35fef69ce9a977e42c8c
-
SHA256
303e55593f1edd578b88624a574a6a855fa335e08f53978df900452d92bc1c45
-
SHA512
eff52ac5b423bf629f190ca4147c11a9b3f2c75fc94c5e8af49e2b244d6b34953ef02d1da03e39b6ee1f71d4d08b6a56e54a95d75e2c1335b0066bba02b70f55
-
SSDEEP
6144:TjVP+nErsz4EwRHN/wHCpkCZOU8qDq4PbcrVEGremJ:nVP+nEriHwnpnZOHug/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9bc8d02752e5a00d309d0c2f1131888
Files
-
a9bc8d02752e5a00d309d0c2f1131888.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textbs Size: - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 273KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ