Static task
static1
Behavioral task
behavioral1
Sample
98c0425968c21cbf71c09e6557e3dea6968abed7275cf56de555ddd16379dc38.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
98c0425968c21cbf71c09e6557e3dea6968abed7275cf56de555ddd16379dc38.exe
Resource
win10v2004-20230824-en
General
-
Target
98c0425968c21cbf71c09e6557e3dea6968abed7275cf56de555ddd16379dc38
-
Size
309KB
-
MD5
a5d0c5dcb39b14959c9d7271beae81e9
-
SHA1
5936998c7c6ebc5295740d33458de88b00c60635
-
SHA256
98c0425968c21cbf71c09e6557e3dea6968abed7275cf56de555ddd16379dc38
-
SHA512
edec79c7eba690c6dc97253d34d51a8030d43ca783e29ae1f54d93c44031e36a8b5f28a6885392921db0ea0f7cf9ccf62482c684958b94d7901bda56fd6be126
-
SSDEEP
6144:8XrrHOIH93H0mRH1wkIStT8m+elxCnWH84XVu1G98:2rruo1akAmV78wVu1e8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98c0425968c21cbf71c09e6557e3dea6968abed7275cf56de555ddd16379dc38
Files
-
98c0425968c21cbf71c09e6557e3dea6968abed7275cf56de555ddd16379dc38.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 960KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 306KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE