Static task
static1
Behavioral task
behavioral1
Sample
c96ffc78e173b193d6271a92f4ef3f96fd1526da3a4383271a588ae0a68260f3.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c96ffc78e173b193d6271a92f4ef3f96fd1526da3a4383271a588ae0a68260f3.exe
Resource
win10v2004-20230915-en
General
-
Target
c96ffc78e173b193d6271a92f4ef3f96fd1526da3a4383271a588ae0a68260f3
-
Size
254KB
-
MD5
0801699fd4f728ca6501dd9cee64b6cb
-
SHA1
1cf4476968b0625a733c977be2a1f9729c2ea8c0
-
SHA256
c96ffc78e173b193d6271a92f4ef3f96fd1526da3a4383271a588ae0a68260f3
-
SHA512
bd26fbd56a5ee4046c8bb0d591aaedbb530165c4f21c4f327fcfc861bad8aefed06f6483fe51f59b9b9b5c150cd106945a4654a2549f8f81fd2b7b29a91cd116
-
SSDEEP
3072:AAyL9W0ElYKXAM7NftffjmNLluuKxHSbz07u4zjJY251dZmxq4hi9ezOhu9vPt:4L5EjQM7dVfjmNLOHSb45dZWqdezOhI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c96ffc78e173b193d6271a92f4ef3f96fd1526da3a4383271a588ae0a68260f3
Files
-
c96ffc78e173b193d6271a92f4ef3f96fd1526da3a4383271a588ae0a68260f3.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.Upack Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE