Static task
static1
Behavioral task
behavioral1
Sample
9db3b2934bb5cc5d560c145cb38de855d9933c689575692546012b72d64b5843.exe
Resource
win7-20241023-en
General
-
Target
9db3b2934bb5cc5d560c145cb38de855d9933c689575692546012b72d64b5843
-
Size
1.7MB
-
MD5
392eb20e892fc8093ff77a2baaa9df93
-
SHA1
f60cd84bc6cc5ea84752dc0b813eaa19a15f64e8
-
SHA256
9db3b2934bb5cc5d560c145cb38de855d9933c689575692546012b72d64b5843
-
SHA512
efaa4f5cc1f040532638ff7d2049f1e8d352e369a3e7c14cc14f892a6ac559a1a82ecc44f1e4b526c7129b5c1b78a0702d718558b969dbffb6f6bb5c4a1d05bd
-
SSDEEP
49152:bZ6EwIkbH7HcGrn8tO47nPnr5+lTgwe4yWO4:F6TtbH7H5gOkPnr5SMweJ4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9db3b2934bb5cc5d560c145cb38de855d9933c689575692546012b72d64b5843
Files
-
9db3b2934bb5cc5d560c145cb38de855d9933c689575692546012b72d64b5843.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fhmortbd Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zyhoaajs Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE