Static task
static1
Behavioral task
behavioral1
Sample
9796634f28fa1b582bfcd1407e25d9906164389371c61aad8f31f90ecdaccade.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9796634f28fa1b582bfcd1407e25d9906164389371c61aad8f31f90ecdaccade.exe
Resource
win10v2004-20240508-en
General
-
Target
9796634f28fa1b582bfcd1407e25d9906164389371c61aad8f31f90ecdaccade
-
Size
14KB
-
MD5
80bc168ed14597c617f8c1837c212ee4
-
SHA1
35df07218b9366f3dfa7519ccd0258eb8ffc098e
-
SHA256
9796634f28fa1b582bfcd1407e25d9906164389371c61aad8f31f90ecdaccade
-
SHA512
b45fb61eff40423e6840af139322bb278981dc2033f1f83bff0d255e07ebbf42fb1a0c9f5470660e2745901766742562a290f9747b23a1176e96803a642a6617
-
SSDEEP
192:vUYGsaihz2FrLUdPfdIN0WXqGy3enq58jl7qMNEszqDE045HQ:GsaiarghlMn6enfjWDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9796634f28fa1b582bfcd1407e25d9906164389371c61aad8f31f90ecdaccade
Files
-
9796634f28fa1b582bfcd1407e25d9906164389371c61aad8f31f90ecdaccade.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ