Static task
static1
Behavioral task
behavioral1
Sample
a9b0ed04f99e5aac2811fa6e45e6cec21d4054f4c8718b5c7ca4a163b7d9477dN.exe
Resource
win7-20240729-en
General
-
Target
a9b0ed04f99e5aac2811fa6e45e6cec21d4054f4c8718b5c7ca4a163b7d9477dN.exe
-
Size
8.8MB
-
MD5
bae02521f735e81722b1dc1bc86899a0
-
SHA1
31c1d8e8fe8b857b9dea43e90511d1def0a0467d
-
SHA256
a9b0ed04f99e5aac2811fa6e45e6cec21d4054f4c8718b5c7ca4a163b7d9477d
-
SHA512
eea9a475dfbde02354a59ef9917233729b19764a957a2c4ba36b03f17fd2fddf91a4dfc1f608111cfdc75398180eee084ff4679108694d90a7ba50dcfd1b5220
-
SSDEEP
196608:0I9xY81oHZPWg1Z/2+Fmq3lgg3gqSjpt6Yi/dNR0QSeZrPykFb:vtK5+807q3+f1FoIKDb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9b0ed04f99e5aac2811fa6e45e6cec21d4054f4c8718b5c7ca4a163b7d9477dN.exe
Files
-
a9b0ed04f99e5aac2811fa6e45e6cec21d4054f4c8718b5c7ca4a163b7d9477dN.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 686KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 127KB - Virtual size: 351KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 905KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 65KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 137KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.VisionT Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 25KB - Virtual size: 28KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 246KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.VisionT Size: - Virtual size: 12.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ