Static task
static1
Behavioral task
behavioral1
Sample
9d38964dd06f7a5631ccc585f9ff6155c1ceb0d26813f51b9fdea343ac6220cf.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9d38964dd06f7a5631ccc585f9ff6155c1ceb0d26813f51b9fdea343ac6220cf.exe
Resource
win10v2004-20240802-en
General
-
Target
9d38964dd06f7a5631ccc585f9ff6155c1ceb0d26813f51b9fdea343ac6220cf
-
Size
80KB
-
MD5
5cd5a686ffcf15a1480cadf9bb79165c
-
SHA1
43e7949d155eb3ceeba42eda1141d4735dcb3a3c
-
SHA256
9d38964dd06f7a5631ccc585f9ff6155c1ceb0d26813f51b9fdea343ac6220cf
-
SHA512
e3c024861e25bc5eb38e3973e60f9e10db44acb09c15d06a929431cf56272930e390a8f9ed672d420650c46a693ad43c8cfcaf9ee720599474a57e41209964e0
-
SSDEEP
1536:+8Ruxiu74qJ3WV6VxUAC0YK7gT2LwaIZTJ+7LhkiB0:rRQ7hGwVOjtK77waMU7ui
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9d38964dd06f7a5631ccc585f9ff6155c1ceb0d26813f51b9fdea343ac6220cf
Files
-
9d38964dd06f7a5631ccc585f9ff6155c1ceb0d26813f51b9fdea343ac6220cf.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.idata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ