Static task
static1
Behavioral task
behavioral1
Sample
d9182b6711ed2cc1e26a55e8b5a8e006937b1d482c51efd67e40c1bfd1d2699a.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d9182b6711ed2cc1e26a55e8b5a8e006937b1d482c51efd67e40c1bfd1d2699a.exe
Resource
win10v2004-20240508-en
General
-
Target
d9182b6711ed2cc1e26a55e8b5a8e006937b1d482c51efd67e40c1bfd1d2699a
-
Size
343KB
-
MD5
1dfeb61ec8e3dfab497aff0090d80c61
-
SHA1
1586bcf4926cbd8308b29ef14954d9776986ad3f
-
SHA256
d9182b6711ed2cc1e26a55e8b5a8e006937b1d482c51efd67e40c1bfd1d2699a
-
SHA512
44afa160bdcacfca23c17d6523c08da3b5ddf38c4115dcfb71bf87a40a1612453396a7343aa00d7d29966affe517ad503da4fb4e5f76b6536b7849944bafb737
-
SSDEEP
6144:zJFzjKA8e+XJy5UpOENwjgzUpg8wuHzShmX8zqY1uV1D:zJFKZy566gzU28wyM31I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9182b6711ed2cc1e26a55e8b5a8e006937b1d482c51efd67e40c1bfd1d2699a
Files
-
d9182b6711ed2cc1e26a55e8b5a8e006937b1d482c51efd67e40c1bfd1d2699a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ