Static task
static1
Behavioral task
behavioral1
Sample
0ff98bd2f10977b3e498ee6aa0d45920.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
0ff98bd2f10977b3e498ee6aa0d45920.exe
Resource
win10v2004-20231023-en
General
-
Target
0ff98bd2f10977b3e498ee6aa0d45920.exe
-
Size
603KB
-
MD5
0ff98bd2f10977b3e498ee6aa0d45920
-
SHA1
93141422f43b472c8727f73d02a69a39b5760427
-
SHA256
a242e79ab56114c79b09e58969936ff89d9f9f34e23427e4b50eaaf978a1dfd0
-
SHA512
4e4fd4f7014229ae7c49ab1233f9e0d639d9dd60f828ec1222e6eb21494b28af05c6693d0331c1e96c85860b68e887bd3df703fc5cb1ff4441a138542b0cee4d
-
SSDEEP
12288:zsCtGfzy9cXTYPAEmpFWvbMsbDkC8n9e3+SKL+Ht6hyfpAP:A/fUcs4v8RQk3+Sa+A/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ff98bd2f10977b3e498ee6aa0d45920.exe
Files
-
0ff98bd2f10977b3e498ee6aa0d45920.exe.exe windows:4 windows x86 arch:x86
775f53e1dbf71c8719c20b6f54e035f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtFlushBuffersFile
kernel32
GetSystemDefaultLCID
user32
GetClipboardViewer
Sections
.text Size: 601KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 349B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE