Static task
static1
Behavioral task
behavioral1
Sample
9bf27663623062244f6678745be602c97780b2776eaa444403a3112f050a7a0e.exe
Resource
win10v2004-20240426-en
General
-
Target
9bf27663623062244f6678745be602c97780b2776eaa444403a3112f050a7a0e
-
Size
2.3MB
-
MD5
c96ae0afdc85fffef70b84dcdd59219d
-
SHA1
fa33149a1cac5bae9aa7774bddde631f2ff480e0
-
SHA256
9bf27663623062244f6678745be602c97780b2776eaa444403a3112f050a7a0e
-
SHA512
557bba2987ec32849bd833dc22b43e528892c01f3059c32961b1f476d2f8b88a05cfc15d641987706267f01f001937f1f47e77e0b5106eb7a87a8f7a2d6a6314
-
SSDEEP
49152:8cyuVdOe3BURm/azU5hvpoB6ExJwrArh7UtmsV:8cyy9URmcDJwih75
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9bf27663623062244f6678745be602c97780b2776eaa444403a3112f050a7a0e
Files
-
9bf27663623062244f6678745be602c97780b2776eaa444403a3112f050a7a0e.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ruowouhd Size: 1.6MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tlgjprrx Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE