Static task
static1
Behavioral task
behavioral1
Sample
b98bc0e77fc94132f030f344cc049315061c5c2a4956c394736e3dc7108235fd.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b98bc0e77fc94132f030f344cc049315061c5c2a4956c394736e3dc7108235fd.exe
Resource
win10v2004-20230915-en
General
-
Target
b98bc0e77fc94132f030f344cc049315061c5c2a4956c394736e3dc7108235fd
-
Size
8.4MB
-
MD5
7fabe197d2b9f2d624ab22c48921a66a
-
SHA1
85641fc731515cf291dd051d5193056c3ac98899
-
SHA256
b98bc0e77fc94132f030f344cc049315061c5c2a4956c394736e3dc7108235fd
-
SHA512
773d65d53b36bbd51ecddca01ec5c6ad96a2ca13bb22bad605fd15497436cc646f26f17a41c16ef8a09a0c2dba44f681bfc4a2f98c37714bfe9bcdaac81076d4
-
SSDEEP
98304:RlO1aTT9KpMB9AQ3+ha4rldLInm783+ruV/C4OWoHI7NINa4tqR+zqbJ278QnP4L:DO1aT9/ah5LInZfdCIetOl27sEMS1sx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b98bc0e77fc94132f030f344cc049315061c5c2a4956c394736e3dc7108235fd
Files
-
b98bc0e77fc94132f030f344cc049315061c5c2a4956c394736e3dc7108235fd.exe windows:5 windows x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.2MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 143KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lnwaaefz Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bdfiiqai Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE