Static task
static1
Behavioral task
behavioral1
Sample
c9b7962d520c5a0a1067f8b61c08ed27b23387ee910b2b0f328fee3a3cdab9d3.exe
Resource
win7-20240903-en
General
-
Target
c9b7962d520c5a0a1067f8b61c08ed27b23387ee910b2b0f328fee3a3cdab9d3
-
Size
4.9MB
-
MD5
6b80064dc2ce990d86dfe626b049e4fd
-
SHA1
086b7a4ef8878371aa32673af2365d562f3179d0
-
SHA256
c9b7962d520c5a0a1067f8b61c08ed27b23387ee910b2b0f328fee3a3cdab9d3
-
SHA512
38c71885521d916f69d2cf21055d3cf9e212c67c78427aca2fe5559c14fb8e7f065345502f2354567f5fa58c329adeb66d01f911faefa28e34bed94478bd713f
-
SSDEEP
98304:2qYmylwIJ31NFsPu7MF7ft6N6FxLFxmI:2qYmf7Qk6OF8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9b7962d520c5a0a1067f8b61c08ed27b23387ee910b2b0f328fee3a3cdab9d3
Files
-
c9b7962d520c5a0a1067f8b61c08ed27b23387ee910b2b0f328fee3a3cdab9d3.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
woyrgnyb Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gbzyzeqn Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE