Static task
static1
Behavioral task
behavioral1
Sample
9ff6e570cfbb1dd9f21006be75d98124a2fd4c0e4ac87428650c3fad7aa954d8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9ff6e570cfbb1dd9f21006be75d98124a2fd4c0e4ac87428650c3fad7aa954d8.exe
Resource
win10-20240214-en
General
-
Target
9ff6e570cfbb1dd9f21006be75d98124a2fd4c0e4ac87428650c3fad7aa954d8
-
Size
1.8MB
-
MD5
bc2b73dde56f733e470cca31e81c666d
-
SHA1
81295fb958fc6a7a14b7ec98a499bcf3c3f74a7d
-
SHA256
9ff6e570cfbb1dd9f21006be75d98124a2fd4c0e4ac87428650c3fad7aa954d8
-
SHA512
48e99bcfb548dc89b309cb5f5808518e06e855a36b22fb66e3b61e03f4addaa094e5ad6fc16c802b42e62098e6996d2798b62e4b90ee7e006b96b71a154499d8
-
SSDEEP
49152:bdxXRM8CHoYJPwMaI8Ae72wvzsIPG4y5pu0qpIlSpg:bdxXRMoYJx8AezvQIP7y5pjjlSu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9ff6e570cfbb1dd9f21006be75d98124a2fd4c0e4ac87428650c3fad7aa954d8
Files
-
9ff6e570cfbb1dd9f21006be75d98124a2fd4c0e4ac87428650c3fad7aa954d8.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oejoshus Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
klmmekyw Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE