Static task
static1
Behavioral task
behavioral1
Sample
a96967f5019c2428b2be9783fcf93ae0a798b2e37cb1085a7b53de784a0db184.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a96967f5019c2428b2be9783fcf93ae0a798b2e37cb1085a7b53de784a0db184.exe
Resource
win10v2004-20230915-en
General
-
Target
a96967f5019c2428b2be9783fcf93ae0a798b2e37cb1085a7b53de784a0db184
-
Size
3.1MB
-
MD5
5e98b22c4960d0a0e142e7b099761d6e
-
SHA1
27f5a5585150978da21436440ee4358e3b3ee2e9
-
SHA256
a96967f5019c2428b2be9783fcf93ae0a798b2e37cb1085a7b53de784a0db184
-
SHA512
fe112f74054717fe7443e8a6b19665e8461954da7a94fe997fd911c493efc6bcdd200d9f31c70e3836ee626e12ecfae5c1eb3bed6015232c3bac6eb2c716dfa5
-
SSDEEP
49152:8MXTU9VGRsxfZzZhOm+XamPNmBSS3RJa6AQzScF3dtaSCrL5/:nTU9VGqVrheZPNN0Rw6AW3dYrV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a96967f5019c2428b2be9783fcf93ae0a798b2e37cb1085a7b53de784a0db184
Files
-
a96967f5019c2428b2be9783fcf93ae0a798b2e37cb1085a7b53de784a0db184.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.4MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 100KB - Virtual size: 100KB
IMAGE_SCN_MEM_READ