Static task
static1
Behavioral task
behavioral1
Sample
9ee04372b700812fbcde8647f58c5a0b3cb237ac26ff93b5f5c68f61982dda17N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9ee04372b700812fbcde8647f58c5a0b3cb237ac26ff93b5f5c68f61982dda17N.exe
Resource
win10v2004-20241007-en
General
-
Target
9ee04372b700812fbcde8647f58c5a0b3cb237ac26ff93b5f5c68f61982dda17N
-
Size
127KB
-
MD5
275104946d53536840b868fa23944cc0
-
SHA1
4fb3729823f587e679d6f0a01a421a831ce6b109
-
SHA256
9ee04372b700812fbcde8647f58c5a0b3cb237ac26ff93b5f5c68f61982dda17
-
SHA512
a621c79bd87c7850aaca72bb7955b97887b743679cb260ae4dd3c1db607ecc90c0e0491675c204911a9a25b5fb57707b28278e1a197604a399884ec967633517
-
SSDEEP
3072:E+7iweLQRtbNqVFewnJULWsyRn82A59+VNU8K:zILQLKFewnJ+sRn835cV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ee04372b700812fbcde8647f58c5a0b3cb237ac26ff93b5f5c68f61982dda17N
Files
-
9ee04372b700812fbcde8647f58c5a0b3cb237ac26ff93b5f5c68f61982dda17N.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 110KB - Virtual size: 676KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE