Static task
static1
Behavioral task
behavioral1
Sample
e9f909e7059ec7e3d7f0f49fbd9fc9ba687ff3d1fc5a6cf0cfaf30a19c80b347.exe
Resource
win7-20240903-en
General
-
Target
e9f909e7059ec7e3d7f0f49fbd9fc9ba687ff3d1fc5a6cf0cfaf30a19c80b347
-
Size
593KB
-
MD5
80fd97e449d74569e8017e962fad5ce1
-
SHA1
90c2161413fef7a734141b9d47425d2e81a5f487
-
SHA256
e9f909e7059ec7e3d7f0f49fbd9fc9ba687ff3d1fc5a6cf0cfaf30a19c80b347
-
SHA512
f1192614c717d26cbb7ae6c55d327790e8876b74fe42f3ab9a4864a7ab329d4a398807af48c42f5edaf6d9c6001654bfc1b48eb17c051d566fb4066c7115ec1c
-
SSDEEP
12288:fzQ0CajEjoDgfYoZNbFRtMFiMyI0Pzc+KomeLkTe:M7n/gytFgw/PDWk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9f909e7059ec7e3d7f0f49fbd9fc9ba687ff3d1fc5a6cf0cfaf30a19c80b347
Files
-
e9f909e7059ec7e3d7f0f49fbd9fc9ba687ff3d1fc5a6cf0cfaf30a19c80b347.exe windows:4 windows x86 arch:x86
9848e308b8886e0792f3ba135f8bd4b7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsHungAppWindow
GetShellWindow
ntdll
RtlGetControlSecurityDescriptor
shell32
ShellMessageBoxA
kernel32
GetCommandLineA
Sections
.text Size: 590KB - Virtual size: 592KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 217B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE