Static task
static1
Behavioral task
behavioral1
Sample
9ca62931981726c3a89cb8cd82ee004c34d6661a7b0e73127c31c343bdc77f6b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9ca62931981726c3a89cb8cd82ee004c34d6661a7b0e73127c31c343bdc77f6b.exe
Resource
win10v2004-20241007-en
General
-
Target
9ca62931981726c3a89cb8cd82ee004c34d6661a7b0e73127c31c343bdc77f6b.exe
-
Size
1.8MB
-
MD5
708077812210f0b5452f7da01a0eaf08
-
SHA1
17724af0e504069b0168f7a541334a902efa1d2d
-
SHA256
9ca62931981726c3a89cb8cd82ee004c34d6661a7b0e73127c31c343bdc77f6b
-
SHA512
506b416c2af9e7fa699e016e325cb74787401ff0efb34463475e142af1fc79b9e8b9b82fbd6bf0f82e470ed79d0ed860a452d07e1909a6e032fb83714055b912
-
SSDEEP
49152:IH/TsFrtHZnq+zSicjd/53JqGvx6VfVjX1oiCcc69:IruVLlYd/55tv6jXeiCc79
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ca62931981726c3a89cb8cd82ee004c34d6661a7b0e73127c31c343bdc77f6b.exe
Files
-
9ca62931981726c3a89cb8cd82ee004c34d6661a7b0e73127c31c343bdc77f6b.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gkytlpcj Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
euwsflts Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE