Static task
static1
Behavioral task
behavioral1
Sample
f9909a59153026fe38bcf6b5b3dcee5c4a8c68b9eb0b2057c5cef68db9201666.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9909a59153026fe38bcf6b5b3dcee5c4a8c68b9eb0b2057c5cef68db9201666.exe
Resource
win10v2004-20240802-en
General
-
Target
f9909a59153026fe38bcf6b5b3dcee5c4a8c68b9eb0b2057c5cef68db9201666
-
Size
340KB
-
MD5
20166187c7231fe1a2951831e71684a4
-
SHA1
63e3db103f5c4ab393d49646f0f1f268531bbd5e
-
SHA256
f9909a59153026fe38bcf6b5b3dcee5c4a8c68b9eb0b2057c5cef68db9201666
-
SHA512
8d3b0765cdd0bc94ee796c1c245c5004e71002666a7636c375e3e61e9611c20cea8599c8f02ef66a91862c0c6ea6714baef725b285a47d414e1c69eb37581481
-
SSDEEP
6144:IhN7lDdL4c54Pn12tE31OZblGXYhu9To:E/dL4c5qnCZUQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9909a59153026fe38bcf6b5b3dcee5c4a8c68b9eb0b2057c5cef68db9201666
Files
-
f9909a59153026fe38bcf6b5b3dcee5c4a8c68b9eb0b2057c5cef68db9201666.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 333KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ