Static task
static1
Behavioral task
behavioral1
Sample
b9f0ff8a40f9788b005a4b6b1806db81.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b9f0ff8a40f9788b005a4b6b1806db81.exe
Resource
win10v2004-20240226-en
General
-
Target
b9f0ff8a40f9788b005a4b6b1806db81
-
Size
27KB
-
MD5
b9f0ff8a40f9788b005a4b6b1806db81
-
SHA1
dedabbfee76b67e622c33578e9992177a7a832d4
-
SHA256
ce6e739662ad084d3b9ef78b330e1cd4dc5a9a3fc9aded2b9bfbae5ec03785d6
-
SHA512
9b560039fa56011d1b2e7c70242a2e08b0693e5194ca1163118d5a3a4a7c8cc1b7943a05144291402e16b4d39ee7a0a7af8cf04317eed58e29f95090738af2c2
-
SSDEEP
384:phAOpANrCRoxYfV8OPOS7SWd9d43fGD05qTM2woUDLDSYWGlhnAZ1mWTF/DY5tfI:rZy+eOPE+d9fG3DzWwhALFFDY7+TJV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9f0ff8a40f9788b005a4b6b1806db81
Files
-
b9f0ff8a40f9788b005a4b6b1806db81.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE