Static task
static1
Behavioral task
behavioral1
Sample
97096cc7d0b46862cf3dd1b2cb08c3b8f56b2ef190c6cdaedf78c8122321f9b5.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
97096cc7d0b46862cf3dd1b2cb08c3b8f56b2ef190c6cdaedf78c8122321f9b5.exe
Resource
win10v2004-20230915-en
General
-
Target
97096cc7d0b46862cf3dd1b2cb08c3b8f56b2ef190c6cdaedf78c8122321f9b5
-
Size
1.1MB
-
MD5
f895e857007c145d5a33f7e17b62426a
-
SHA1
97d32993e4902d6c7e680e1b7c93b3a6d44cf3a2
-
SHA256
97096cc7d0b46862cf3dd1b2cb08c3b8f56b2ef190c6cdaedf78c8122321f9b5
-
SHA512
6c4ba784dcf399d0dceb92987a72c02214e25cb5296a89d59f260d14fdd968c71d843f9dd83a39f6ba96dff16a03d26075831b028192b7d7cc8512c64fc29ebc
-
SSDEEP
24576:/ZP5TfXtFbY3CAvWmJkTNpXhBj/MkQXpBAgzgsmpGo4z75:/3TFSMldHj0kMpBAgUy75
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97096cc7d0b46862cf3dd1b2cb08c3b8f56b2ef190c6cdaedf78c8122321f9b5
Files
-
97096cc7d0b46862cf3dd1b2cb08c3b8f56b2ef190c6cdaedf78c8122321f9b5.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.58720 Size: - Virtual size: 568KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.58721 Size: - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 571KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
89vgs Size: 383KB - Virtual size: 384KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
89vgs Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
89vgs Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ