Static task
static1
Behavioral task
behavioral1
Sample
a9fb1f2262b58902dd91c82d297dfa13.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a9fb1f2262b58902dd91c82d297dfa13.exe
Resource
win10v2004-20240226-en
General
-
Target
a9fb1f2262b58902dd91c82d297dfa13
-
Size
399KB
-
MD5
a9fb1f2262b58902dd91c82d297dfa13
-
SHA1
c4f035275f211251811aea021945040700f9b394
-
SHA256
7de36791e074588d5f488a8566958f083928bae1a1d1b788ef01c9b756e19bc1
-
SHA512
02e256a99f109cec6814fefeace16197e4ab612e96a5f03c76ddc1d5bb929186bda2a8dedc248ea73630b3417a5bc791758d48e9afc34bc197680e864bbb92e1
-
SSDEEP
3072:edMpZ8s0YgdhaW0whMvpvGXwH1Uzan8sR5+SB6Tqjr2Sy5/KUA57ddafhCqb:j8JdtdhMxyK1UzafFlva5/KUIafHb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9fb1f2262b58902dd91c82d297dfa13
Files
-
a9fb1f2262b58902dd91c82d297dfa13.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 138KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dvpx Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
xbdq Size: - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
svmusc Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dudcrm Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE