Static task
static1
Behavioral task
behavioral1
Sample
9adf6dd309b8d592ef7671ca604a86622d178ea42e9a6535887cc691362f6f79.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9adf6dd309b8d592ef7671ca604a86622d178ea42e9a6535887cc691362f6f79.exe
Resource
win10v2004-20241007-en
General
-
Target
9adf6dd309b8d592ef7671ca604a86622d178ea42e9a6535887cc691362f6f79
-
Size
156KB
-
MD5
1c9afbf674982eea34580de954e9ba08
-
SHA1
e76c50d3ee1cec89ca3c96cbfaedfe8077e0a155
-
SHA256
9adf6dd309b8d592ef7671ca604a86622d178ea42e9a6535887cc691362f6f79
-
SHA512
6291edfd15ff9946c7ca4f226a08a8c67ebeecd43186114c5ecc0a1f5b8299c957725e937f93b4effce9b2aba08fad8aff74290fb9dba7563de9b2157f61f651
-
SSDEEP
3072:iJyj32Mg8Z6eijNep4CdmBuMs88l+oOFdI5n+Q66ZiMItdxgghFvdZwQ11s:F2ApiEDmIh88coqy5+QNZiP2ghFVZwQU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9adf6dd309b8d592ef7671ca604a86622d178ea42e9a6535887cc691362f6f79
Files
-
9adf6dd309b8d592ef7671ca604a86622d178ea42e9a6535887cc691362f6f79.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 309B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ