Static task
static1
Behavioral task
behavioral1
Sample
f98c922f8cf76dexeexeexeex.exe
Resource
win7-20230705-en
Behavioral task
behavioral2
Sample
f98c922f8cf76dexeexeexeex.exe
Resource
win10v2004-20230703-en
General
-
Target
f98c922f8cf76dexeexeexeex.exe
-
Size
323KB
-
MD5
f98c922f8cf76df4f7aa8e3ce4be062a
-
SHA1
80f30fc1fb6351e18bd69ca9cd689dbc05dc11fd
-
SHA256
c22a12504c8f463a3f878ffa4ba2a58eb64133508bc64f8315aa9f1db63db144
-
SHA512
16fef362fa27bb5ba7c68cdd98040d22206223676721ae2b7c7d139b7e1f0c07e62d8dee43d756eb44c6477f13078abec08ab954da73a7af8741ef936c331c4d
-
SSDEEP
6144:VuJFLUb2Jk47ItrVe5h+mT5EWZxYrYBei6/:VuJFgb2a1VkT5EYxYrQU/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f98c922f8cf76dexeexeexeex.exe
Files
-
f98c922f8cf76dexeexeexeex.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 228KB - Virtual size: 740KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE