Static task
static1
Behavioral task
behavioral1
Sample
d9c96a601df54e4fac6f18b0c393a14e7c816eb8e0857580c38c83bb6028e654.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d9c96a601df54e4fac6f18b0c393a14e7c816eb8e0857580c38c83bb6028e654.exe
Resource
win10v2004-20240426-en
General
-
Target
d9c96a601df54e4fac6f18b0c393a14e7c816eb8e0857580c38c83bb6028e654
-
Size
63KB
-
MD5
20979df41a1f2af4aaa25d9db352bb96
-
SHA1
3f8ea3c786195c1bbface314ace1ee4347151deb
-
SHA256
d9c96a601df54e4fac6f18b0c393a14e7c816eb8e0857580c38c83bb6028e654
-
SHA512
71c18bdf961638f89eb9ec900b8b16aed7276bffa18b63a8efa430bdd17869ceae765e02fe386e6d6ec03dffa6f0989f9ebd21f42f318dcc1cafc9258807f72a
-
SSDEEP
192:4I4jyJyIobR0crkr/nnN8v5YK06entPpdSTHXlqN+fF1WpX4Wm:Ragy5bWXr/nmNGtSTHXlqN+fq4T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9c96a601df54e4fac6f18b0c393a14e7c816eb8e0857580c38c83bb6028e654
Files
-
d9c96a601df54e4fac6f18b0c393a14e7c816eb8e0857580c38c83bb6028e654.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: 6KB - Virtual size: 32KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE