Static task
static1
Behavioral task
behavioral1
Sample
b9861d2428d3fb272e9f2fe3eedc95b6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b9861d2428d3fb272e9f2fe3eedc95b6.exe
Resource
win10v2004-20231215-en
General
-
Target
b9861d2428d3fb272e9f2fe3eedc95b6
-
Size
22KB
-
MD5
b9861d2428d3fb272e9f2fe3eedc95b6
-
SHA1
4f1303511a5a9562ab583719cec6c484092d1b05
-
SHA256
eec596247b5b6ef6de77186bccb44f4d4fba66e7c46d4fe154dfba4ffc608e98
-
SHA512
612dce2831920193f71ead4a9ac18313eb9a4b9559a6b45a992063020690a9e56863737db12ef5c8de7c8f51d6e367a00a3d8365fb280fe749e313955fa9f3bd
-
SSDEEP
384:3t8ISsXOsYIRg2ghA7PaHCiXgWM6PSPnRQWvmrGiN5MVIm49NJtLW:3tDOlII0iiiXVQBvZiH3m4Lfy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9861d2428d3fb272e9f2fe3eedc95b6
Files
-
b9861d2428d3fb272e9f2fe3eedc95b6.exe windows:4 windows x86 arch:x86
77e8c00ab779e4f7244b5f48a129b23f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
atan2
ceil
div
feof
fgetwc
Sections
.data Size: 15KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tasm Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NewIT Size: 512B - Virtual size: 136B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE