Static task
static1
Behavioral task
behavioral1
Sample
9a77a96195039c211b22e821183f47a501f3deb402b5c03b744f738150a5626e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9a77a96195039c211b22e821183f47a501f3deb402b5c03b744f738150a5626e.exe
Resource
win10v2004-20240426-en
General
-
Target
9a77a96195039c211b22e821183f47a501f3deb402b5c03b744f738150a5626e
-
Size
91KB
-
MD5
02298bc71b17e3cc682468a9e5c9789d
-
SHA1
ff10519760f8a8ca6b4604c47aefb2fe67f4efde
-
SHA256
9a77a96195039c211b22e821183f47a501f3deb402b5c03b744f738150a5626e
-
SHA512
15d5cd9c9d154932a9adc98357f2f0b9fdd15e807a9544c68d312b183b5dcd9fef08436f8422d855be33bd3a538e0f126fdaaf5d14902697bd1c906cb0a84169
-
SSDEEP
1536:IFAutcCNS1mgnd2y1nrPlGiCcCBEulwHiFAutcCNS1mgnd2y1nrPlGiCcCBEulwN:IpWC4YgBPlGiyll8ipWC4YgBPlGiyllM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9a77a96195039c211b22e821183f47a501f3deb402b5c03b744f738150a5626e
Files
-
9a77a96195039c211b22e821183f47a501f3deb402b5c03b744f738150a5626e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 35KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 741B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE