Static task
static1
Behavioral task
behavioral1
Sample
9941b64f26d4ff59a0161ef223f90af0N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
9941b64f26d4ff59a0161ef223f90af0N.exe
Resource
win10v2004-20240802-en
General
-
Target
9941b64f26d4ff59a0161ef223f90af0N.exe
-
Size
52KB
-
MD5
9941b64f26d4ff59a0161ef223f90af0
-
SHA1
79024703f8a96fe427e4d6798fcd1a9da1c8ddf9
-
SHA256
060f0c0f5fcb6f7ed5a9ac0af365c82464aa020683bf75ca4c722599fe764a52
-
SHA512
de606b6a82db41b789b6759ad714f3d45ecf2d7354aca2c63b8374cd9cba0e82fbbf23366442eb787136c5f1cdc7c267d10a9f947f2825dd12e1f64b2ca795c1
-
SSDEEP
768:x6X8B15gknDHRlsdzi8dRkDmQMSvACLeKRssxk4ywGYYyT8o/1H5F/sISIMABvKZ:eynXsliBnoCL4sZT8ufMAdKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9941b64f26d4ff59a0161ef223f90af0N.exe
Files
-
9941b64f26d4ff59a0161ef223f90af0N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ