Static task
static1
Behavioral task
behavioral1
Sample
9f83fa3babcfff27b09d99866091351c8f209f66580f0bf5f27d42ca3188afee.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9f83fa3babcfff27b09d99866091351c8f209f66580f0bf5f27d42ca3188afee.exe
Resource
win10v2004-20240426-en
General
-
Target
9f83fa3babcfff27b09d99866091351c8f209f66580f0bf5f27d42ca3188afee
-
Size
14KB
-
MD5
b6cdf874e1d00c656681f4ca8c60f27b
-
SHA1
4a2a71e20c1c03c594caa674175d98a4b07898ac
-
SHA256
9f83fa3babcfff27b09d99866091351c8f209f66580f0bf5f27d42ca3188afee
-
SHA512
81dc55811e2383923762cf2d46db009577c1725ac23e486e94172360ae62dca7601a3841ea5533ecf46bd68860db462424f83a0708fcb2d8def07034a56e83f0
-
SSDEEP
384:ciNWyDGv71oCXguxk8iSkB4IC6DE045H:LNG1oSsSkBjCAA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f83fa3babcfff27b09d99866091351c8f209f66580f0bf5f27d42ca3188afee
Files
-
9f83fa3babcfff27b09d99866091351c8f209f66580f0bf5f27d42ca3188afee.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ