Static task
static1
Behavioral task
behavioral1
Sample
99fb5a0e5dffc90153c2e4c226cfd4cc.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
99fb5a0e5dffc90153c2e4c226cfd4cc.exe
Resource
win10v2004-20230220-en
General
-
Target
99fb5a0e5dffc90153c2e4c226cfd4cc.exe
-
Size
3.0MB
-
MD5
99fb5a0e5dffc90153c2e4c226cfd4cc
-
SHA1
8f4d3866b354e7c3b4b708d01ee2fc8f5d727049
-
SHA256
6a6412d8144185daee699dd5de22bb3bea46b2433cb4e45fd3ae4577831ce54a
-
SHA512
51286e944d9a9e2e46091d1ed5a0bbab726d1cdb8c96108b54583cbdade213d3314fecd650dbbc21a0025369129f235aa7bc3bb21b9e74abc44c4ec7ced9f831
-
SSDEEP
49152:GrhOD1vMrf2l3qu0CtzQiJaz1SpuxCTcxPJrYwtdlVnx5VKT1NNGgOposTyDwt4:0kvMmqsKiM1SkrxPJrYS7KT1mvposTyh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99fb5a0e5dffc90153c2e4c226cfd4cc.exe
Files
-
99fb5a0e5dffc90153c2e4c226cfd4cc.exe.exe windows x86
a2a3e6d4fc968e1e65b99fc8b576cc36
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
memcpy
user32
GetProcessWindowStation
Sections
.MPRESS1 Size: 2.9MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE