Static task
static1
Behavioral task
behavioral1
Sample
9aa29c004b21c8589893f34ecca4c39150caa55320264a7bd2318c6b957e37af.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9aa29c004b21c8589893f34ecca4c39150caa55320264a7bd2318c6b957e37af.exe
Resource
win10v2004-20241007-en
General
-
Target
9aa29c004b21c8589893f34ecca4c39150caa55320264a7bd2318c6b957e37af
-
Size
1.8MB
-
MD5
c90ce771ef83231b8cec1b684ecee639
-
SHA1
6818a9d4919dff1ad63aa5f05a0e5bf3b6b33205
-
SHA256
9aa29c004b21c8589893f34ecca4c39150caa55320264a7bd2318c6b957e37af
-
SHA512
cb9f49ce1fa221ff60f8b47e5934ddc1fe717c7fa0e0a1f7fa559356626cb964dac38970e14a6beb3a390b90f304586714dbf0ba1cd36807aa90fe4aeb5cef73
-
SSDEEP
49152:prYH694jESHKqE4V3X1XL/62vTBy1UwYNsb6EvCj7r:tYa9PKV3X1bS2vOUra
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9aa29c004b21c8589893f34ecca4c39150caa55320264a7bd2318c6b957e37af
Files
-
9aa29c004b21c8589893f34ecca4c39150caa55320264a7bd2318c6b957e37af.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 147KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rutkinid Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qyfyetpj Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE