Static task
static1
Behavioral task
behavioral1
Sample
a9e0a464e37dab495072a6754bbb509d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a9e0a464e37dab495072a6754bbb509d.exe
Resource
win10v2004-20240226-en
General
-
Target
a9e0a464e37dab495072a6754bbb509d
-
Size
512KB
-
MD5
a9e0a464e37dab495072a6754bbb509d
-
SHA1
96e268a5a64abfa534ca19e3a8cc136a72bf470d
-
SHA256
b7405db15ced60431c4ceef261abc0100df98dc1dcb72b9a41906c43fb83c347
-
SHA512
766efb926dd32cf4e1d0bcf0e2d717237b35735b63ad4e3e5c82584c9186bb68e9d0d0a162c7ae5c55d5fd9b76d2ce331595f49e61d8cbb140bdc2137027db74
-
SSDEEP
12288:vWUZrSDb9F1nv9Qn31XmmFEQj2wdLbJ73WrAnT1aq6SA2fjtSsZoKtD5D:OUZrSDBXnv9UlegLqCTp6T2rDZoKttD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9e0a464e37dab495072a6754bbb509d
Files
-
a9e0a464e37dab495072a6754bbb509d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 803KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 202B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE