Static task
static1
Behavioral task
behavioral1
Sample
9bbcc3d101c01634c8975d660b299af7934617f0995534bc650085407f146e7b.exe
Resource
win7-20240903-en
General
-
Target
9bbcc3d101c01634c8975d660b299af7934617f0995534bc650085407f146e7b
-
Size
1.8MB
-
MD5
d9e2ec9d06fc57d859111f72bc018b86
-
SHA1
483cc0c64a5f8d81267a419e095ccce5c3365442
-
SHA256
9bbcc3d101c01634c8975d660b299af7934617f0995534bc650085407f146e7b
-
SHA512
0db25db0ce800d309bd38132ee21f088709ab98903ea862c0916d8673dc044668663f964e4cb3f6a084e72e3cb2e7cc3b34d0f3c75677c0a1f650f668e5efd73
-
SSDEEP
49152:yg1F/MVss6RDgyJeECulebCKfJkWGTgddGoV1BN0uEcQR+0u:bF/MVssqzYulApGM2oXcmH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9bbcc3d101c01634c8975d660b299af7934617f0995534bc650085407f146e7b
Files
-
9bbcc3d101c01634c8975d660b299af7934617f0995534bc650085407f146e7b.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bdomjrvz Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mpsmdxqo Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE