Static task
static1
Behavioral task
behavioral1
Sample
988b5bd4c66ee2cbe7fc864183da8fb1da892a8e982c3381486e8b91e6000656.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
988b5bd4c66ee2cbe7fc864183da8fb1da892a8e982c3381486e8b91e6000656.exe
Resource
win10v2004-20230915-en
General
-
Target
988b5bd4c66ee2cbe7fc864183da8fb1da892a8e982c3381486e8b91e6000656
-
Size
646KB
-
MD5
24c40b98b4ae0b953933a3b191152228
-
SHA1
016fc745b65a977e3c978a20c889ea72d316fbdb
-
SHA256
988b5bd4c66ee2cbe7fc864183da8fb1da892a8e982c3381486e8b91e6000656
-
SHA512
620670a5f12234f05d2306c3782903fd8d94a47b9d80b10ad177bb025a3ccf4bca1e786e28b1f8c3e02984fb8c515547e948a947919f84fbbaf3354d54b3f3fa
-
SSDEEP
6144:ANsIKRHOt5eIdP6dvhGFjrXIR9h1QDVa3OUOu7NS8IDza8NSkmOhOoT4Z+xH457x:03KR2gduXIRgVa+s7NS8IDzafNOSFhR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 988b5bd4c66ee2cbe7fc864183da8fb1da892a8e982c3381486e8b91e6000656
Files
-
988b5bd4c66ee2cbe7fc864183da8fb1da892a8e982c3381486e8b91e6000656.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 396KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 208KB - Virtual size: 245KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE