Static task
static1
Behavioral task
behavioral1
Sample
9ebf0c42738e242d984b970c143c9a8188e816eb3b194544123c700febb9b6fb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9ebf0c42738e242d984b970c143c9a8188e816eb3b194544123c700febb9b6fb.exe
Resource
win10v2004-20240226-en
General
-
Target
9ebf0c42738e242d984b970c143c9a8188e816eb3b194544123c700febb9b6fb.exe
-
Size
400KB
-
MD5
5872f8780773d91456ff7ffb1af63ee5
-
SHA1
83f958bf2cad43e38cd168f8cd67f7b780f06d76
-
SHA256
9ebf0c42738e242d984b970c143c9a8188e816eb3b194544123c700febb9b6fb
-
SHA512
9dd0c7e03dbbdf53d5f472b7e5e08f1e3c68f4c7a6a8a8c66bf6c071b42e4ac0bd0b6e524823091830863452582b14873e6baed82a6c3c908abd7a9d5d653ce3
-
SSDEEP
6144:X6vB62ikwcgq4Ux2xdzrsTPfFJPwKxBWplFnzzkRJvTm49/Thx+apAJkRnA:XuB62oHK2x0nFTAFny1Tx9Dm2m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ebf0c42738e242d984b970c143c9a8188e816eb3b194544123c700febb9b6fb.exe
Files
-
9ebf0c42738e242d984b970c143c9a8188e816eb3b194544123c700febb9b6fb.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 331KB - Virtual size: 330KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ