Static task
static1
Behavioral task
behavioral1
Sample
9194469fd47dc746711ff273309a7cbbbfb4649caf68b7a41edae1f98f6fd242.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9194469fd47dc746711ff273309a7cbbbfb4649caf68b7a41edae1f98f6fd242.exe
Resource
win10v2004-20240709-en
General
-
Target
9194469fd47dc746711ff273309a7cbbbfb4649caf68b7a41edae1f98f6fd242.exe
-
Size
3.3MB
-
MD5
488d153d98de2cd67f56e33ee9d0259e
-
SHA1
6c86ae5f95ec6a6417581dbd5148e6dbe3d96188
-
SHA256
9194469fd47dc746711ff273309a7cbbbfb4649caf68b7a41edae1f98f6fd242
-
SHA512
b91630ad09261d1b722fe2a4499dc6fa82a1d5551efc0ebcabe22721ccd03f0a885b6f21cdb6a59cc03d87d507cf7f54faa09e1052c0e82346a5f7802bef9e78
-
SSDEEP
98304:kl7BhTkh8maw0whCK5bMGrawUtQAD/cEsav8EXy:+Caw5bMeU2AD/cRc8Sy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9194469fd47dc746711ff273309a7cbbbfb4649caf68b7a41edae1f98f6fd242.exe
Files
-
9194469fd47dc746711ff273309a7cbbbfb4649caf68b7a41edae1f98f6fd242.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 2.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0!6fHE#e Size: 910KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE