Static task
static1
Behavioral task
behavioral1
Sample
9Z0IR_file.exe
Resource
win7-20240729-en
General
-
Target
9Z0IR_file.exe
-
Size
5.0MB
-
MD5
9b5b2fa83e26857f054f6cc89169b7c4
-
SHA1
b81c804fb1fb848a61f9ba773d9bcadbd68b6a82
-
SHA256
230dc0447d088fb9d74b404de4a388e5bbe03af7ffa2d7516e167a95c4ed945b
-
SHA512
00f6285bdf6f66a8efbcae1df5cda5bdaf042d6e2a26f831da52b398043f40411c86bcb3ce31c96c02018ce9631d2985a131f17d497611a2c3254e418fa50302
-
SSDEEP
49152:mOVHIubPJSpXamTP0BUG7ZbICj5zzt/2vrTt:X7bspXamTcBHcC9IvF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9Z0IR_file.exe
Files
-
9Z0IR_file.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rukrcqdj Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eilvtwrx Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE