Static task
static1
Behavioral task
behavioral1
Sample
9dec0dc2187f00a04677d49d7da3ad45be58142f62e68e3195192465797e9506.exe
Resource
win7-20240903-en
General
-
Target
9dec0dc2187f00a04677d49d7da3ad45be58142f62e68e3195192465797e9506
-
Size
2.7MB
-
MD5
31c6811614e6b7a92d67610651f5a98a
-
SHA1
77ef9f47c7f5898e8a9726425c9052fff2305b19
-
SHA256
9dec0dc2187f00a04677d49d7da3ad45be58142f62e68e3195192465797e9506
-
SHA512
107ab76eebf4c3fa9608786a0545f88e6c4ba083b0869a2e4cd76eb3161530beef228a4c0788ffcc6b77f852442c256908cdf5fc52aa464c2a22ba7bc558338d
-
SSDEEP
49152:7waI9SBXtQBz02lS3FarZpeB9CrF/SpqO:7waI9SB9Az02lS1QpS9CrF/6qO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9dec0dc2187f00a04677d49d7da3ad45be58142f62e68e3195192465797e9506
Files
-
9dec0dc2187f00a04677d49d7da3ad45be58142f62e68e3195192465797e9506.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rjvhpssm Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
avqswhkq Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE