Static task
static1
Behavioral task
behavioral1
Sample
b9527090532ad676b834bf1b82d8fc911d47ded5a9fa557453da8f65fe0e4fa1.exe
Resource
win7-20240221-en
General
-
Target
b9527090532ad676b834bf1b82d8fc911d47ded5a9fa557453da8f65fe0e4fa1
-
Size
1.3MB
-
MD5
fcb4bfd1ea606788f137e0cbaaf0a146
-
SHA1
0947d8a816f62d673e54e39f8a817e0357c3285f
-
SHA256
b9527090532ad676b834bf1b82d8fc911d47ded5a9fa557453da8f65fe0e4fa1
-
SHA512
d7dfb60a6e056ed81aa1b4d105800afee0f785d3026dcdc789f50839820c8d8903a844b49aed8f6bee8e5de1134b032429e043cbb872cea8f2a5d49b47f281fd
-
SSDEEP
24576:t5kZ1HLuQsChpOABZyvnZctwQkN2K3yWds0JkKyVbcu6igPJ:tYAQ3AvnZctlpadsLlJ6JJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9527090532ad676b834bf1b82d8fc911d47ded5a9fa557453da8f65fe0e4fa1
Files
-
b9527090532ad676b834bf1b82d8fc911d47ded5a9fa557453da8f65fe0e4fa1.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 630KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE