Static task
static1
Behavioral task
behavioral1
Sample
c9d388b63ba807c84264255080f7c4e7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c9d388b63ba807c84264255080f7c4e7.exe
Resource
win10v2004-20240226-en
General
-
Target
c9d388b63ba807c84264255080f7c4e7
-
Size
485KB
-
MD5
c9d388b63ba807c84264255080f7c4e7
-
SHA1
6196a16263182f04d1bdbadd832976d060152e9a
-
SHA256
bebb8887b5f5b7cac5062cad0918af89b8020f32bc8d70c4d79f605859b0159f
-
SHA512
4961a7bf52d3d3f87e5d4d6cf34d204e29cd256e1ed569faafd91b86988083742082fcffe73f9be2e4ec7ef7785ec2f6b7d361bffae453278cd33b93c0732681
-
SSDEEP
6144:wjJ9rrlXdHRMc3Z/prHJIqc44E0VwVhvGr90gYN3GTYRAC0EVmU2EgG:urrBdWcJ/taG4vw25QwXC0xw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9d388b63ba807c84264255080f7c4e7
Files
-
c9d388b63ba807c84264255080f7c4e7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.data Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 468KB - Virtual size: 468KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�� Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE