Static task
static1
Behavioral task
behavioral1
Sample
9903ca5e3502d2a9fd1b6ead82ed1e40N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
9903ca5e3502d2a9fd1b6ead82ed1e40N.exe
Resource
win10v2004-20240802-en
General
-
Target
9903ca5e3502d2a9fd1b6ead82ed1e40N
-
Size
255KB
-
MD5
9903ca5e3502d2a9fd1b6ead82ed1e40
-
SHA1
8d65ab5510bd3ad826cf3328d16f7e6aab0c652b
-
SHA256
0e9278dea1376743f49e578ecd78d67653a25543193c5c82a73b4568a92269b0
-
SHA512
c3d23248046b36a341e4a3d246ee3cae3b11e0e217cdc35e88b0dc8360ab3adb1f83171b0143d56376f1ccb04290ff98daf335e6872fcaa2f962542ce2f60f91
-
SSDEEP
3072:e6tk7ZJ8tTO6uhQGUu/l8S8GuTb3mxs1Xj:Q8ty6OQGU86TbWxWT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9903ca5e3502d2a9fd1b6ead82ed1e40N
Files
-
9903ca5e3502d2a9fd1b6ead82ed1e40N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
omgrb Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bwwsnz Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
tpgsa Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
brdhz Size: 11KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE