Static task
static1
Behavioral task
behavioral1
Sample
978beb6f3e52caac2c69948820ce1a5bd43fb1c86eda47d56f7f37e22a4aa92f.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
978beb6f3e52caac2c69948820ce1a5bd43fb1c86eda47d56f7f37e22a4aa92f.exe
Resource
win10v2004-20231023-en
General
-
Target
978beb6f3e52caac2c69948820ce1a5bd43fb1c86eda47d56f7f37e22a4aa92f
-
Size
3.5MB
-
MD5
ba88fdc61b460af70c24a3587cd5b6b8
-
SHA1
a06c79f19b02cf2150df7b1e4650db84b790def5
-
SHA256
978beb6f3e52caac2c69948820ce1a5bd43fb1c86eda47d56f7f37e22a4aa92f
-
SHA512
5592c52aa7539f1f1036273417f85502fbb8e277275ae9f0ea2b63086c092c637f06d4785443d785ffed7259f66d8bfe9111e3dffe1fa8bb54c4fcdfe6cf9e1d
-
SSDEEP
49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlrsrQUzEe3Av3kbhqmCFgXwybPQhk:c+8X9G3vP3AMFsrQUzT3Av3FmCF3yLQu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 978beb6f3e52caac2c69948820ce1a5bd43fb1c86eda47d56f7f37e22a4aa92f
Files
-
978beb6f3e52caac2c69948820ce1a5bd43fb1c86eda47d56f7f37e22a4aa92f.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 994KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ