Static task
static1
Behavioral task
behavioral1
Sample
9dda9c2e2576d7f83a72345ad4813740665b8986d8ac7a984b2b6ee663de0739N.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
9dda9c2e2576d7f83a72345ad4813740665b8986d8ac7a984b2b6ee663de0739N.exe
Resource
win10v2004-20250207-en
General
-
Target
9dda9c2e2576d7f83a72345ad4813740665b8986d8ac7a984b2b6ee663de0739N.exe
-
Size
299KB
-
MD5
fe44151d26532fc78123195c70a4db90
-
SHA1
c48a042883935e286f53201cea731066954152de
-
SHA256
9dda9c2e2576d7f83a72345ad4813740665b8986d8ac7a984b2b6ee663de0739
-
SHA512
123ebf66cb1eef1e17746fdff8736de703f688e3a1d6a74f50b9f66dac488e7ce39ba7492d4de61084afcd40a3691cb44c0c18d1421ef8af904cfc84ddb4b8bc
-
SSDEEP
6144:h0grT4pTSzlAQExlPwWtWaMXBLMJsujstDWfRjTfQVP:eHmCtWX5pAfRjT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9dda9c2e2576d7f83a72345ad4813740665b8986d8ac7a984b2b6ee663de0739N.exe
Files
-
9dda9c2e2576d7f83a72345ad4813740665b8986d8ac7a984b2b6ee663de0739N.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 283KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ