Static task
static1
Behavioral task
behavioral1
Sample
c9c8db17c7e875d0ab793a6633fa8577.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c9c8db17c7e875d0ab793a6633fa8577.exe
Resource
win10v2004-20240226-en
General
-
Target
c9c8db17c7e875d0ab793a6633fa8577
-
Size
33KB
-
MD5
c9c8db17c7e875d0ab793a6633fa8577
-
SHA1
11d4d99559925b359978ac0c0edb641cb7a66d45
-
SHA256
5ce01342cc28668278761102bd0a89bed7ecda67ba7932beabc3262f3b91a8b7
-
SHA512
f0c91878822a157ff3cb26a237afc150d3a1cfc51eb262233a7acb33d9fe46b472f5e1d5783edd9dbce4631699c2f2dd601d6eb6dca37a7a45c6dee933161111
-
SSDEEP
768:O/8jo3MDdtwySqDALi9RG3afrzi/P/7aMbzevg6yOIwo+1Nr+:O/8oc3NE+e3afPw/5/rxO7o+Xr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9c8db17c7e875d0ab793a6633fa8577
Files
-
c9c8db17c7e875d0ab793a6633fa8577.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE