Static task
static1
Behavioral task
behavioral1
Sample
U9MIn5ATFJUc3Ki.exe
Resource
win7-20240221-en
General
-
Target
U9MIn5ATFJUc3Ki.exe
-
Size
560KB
-
MD5
48dea49e21ebe69a63cd48700293c05d
-
SHA1
854e9880e37e4eb298260a95a7b3c2f3cfbbd672
-
SHA256
3a5d03976f0bfaf997300d2a4c3bbb8e2f7b5f2ac06535e6ed3f59de137d1467
-
SHA512
b2b37072594fbc339134a98d0d10967967b6882bd3e4f153a1e38200d52059456ebb2e0088aea03b9099623b2769b09fd982b9bfa7cc93ee5644584f702a2810
-
SSDEEP
12288:x0pei36RAdUQGuk3qyqfw1N9OEFWliaz5Wk7Al10AbL3wW+7:Gpp36gUQGbww1N8Wwz5x8l10AP3e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource U9MIn5ATFJUc3Ki.exe
Files
-
U9MIn5ATFJUc3Ki.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 550KB - Virtual size: 549KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ