Static task
static1
Behavioral task
behavioral1
Sample
d9f951f03d29a3d1e1ce3f629f42b47d978bd2a36a9d6e8bfd8b61eaea98fabe.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d9f951f03d29a3d1e1ce3f629f42b47d978bd2a36a9d6e8bfd8b61eaea98fabe.exe
Resource
win10v2004-20240508-en
General
-
Target
d9f951f03d29a3d1e1ce3f629f42b47d978bd2a36a9d6e8bfd8b61eaea98fabe
-
Size
14KB
-
MD5
cb935974d47e475cf027434db55b7014
-
SHA1
d30cb8475aa66b20b6bce5e259cb69038329f82b
-
SHA256
d9f951f03d29a3d1e1ce3f629f42b47d978bd2a36a9d6e8bfd8b61eaea98fabe
-
SHA512
42a62024bbd532647f8b6cc540766f43d51b45572d27efdff3372204aea66f9f7a6eabaa197d396efc56196b06b7a026e9960eaf4fdb02804cee10ed9ed3ba76
-
SSDEEP
384:RXLDB9l/32e9Vf/gnqkkmhWbM2VJf1PwsO84BDE045HYiJiJiJiJ:hHB9l+e9V3g6mmMS9EZRAGSSSS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9f951f03d29a3d1e1ce3f629f42b47d978bd2a36a9d6e8bfd8b61eaea98fabe
Files
-
d9f951f03d29a3d1e1ce3f629f42b47d978bd2a36a9d6e8bfd8b61eaea98fabe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ