Static task
static1
Behavioral task
behavioral1
Sample
b9a0851bbb3ed476b114ea6f18fa7de092e0a4e3c8b594e07799c32e56157fca.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b9a0851bbb3ed476b114ea6f18fa7de092e0a4e3c8b594e07799c32e56157fca.exe
Resource
win10v2004-20241007-en
General
-
Target
b9a0851bbb3ed476b114ea6f18fa7de092e0a4e3c8b594e07799c32e56157fca
-
Size
1.9MB
-
MD5
19d00d901034e6f159fd92037d4642e6
-
SHA1
1bd2dca7c6bcfa72933f2d156b08206eecf0e74d
-
SHA256
b9a0851bbb3ed476b114ea6f18fa7de092e0a4e3c8b594e07799c32e56157fca
-
SHA512
a527fa038f981e826b1469c403c7f1dad1b4116f60e2a66174de4647d083c586530e4b989aef72d58928bc24403e0fcce2040e3b932cddf634628b3d6f0a498f
-
SSDEEP
49152:Tkq+xKsAz4UsIEZcMAk+Ayl/kXtGvxu6LdrXiXd9ZR6/uFVIcGx:gHKsAzWVcMT+96dGZu6J7ibfFo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9a0851bbb3ed476b114ea6f18fa7de092e0a4e3c8b594e07799c32e56157fca
Files
-
b9a0851bbb3ed476b114ea6f18fa7de092e0a4e3c8b594e07799c32e56157fca.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 147KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bxmgvffe Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lpjplqmk Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE