Static task
static1
Behavioral task
behavioral1
Sample
d98cc6218b609296095f004a218418843c58e172046dc3aae43f92adcb49106b.exe
Resource
win10v2004-20231127-en
General
-
Target
d98cc6218b609296095f004a218418843c58e172046dc3aae43f92adcb49106b
-
Size
6.9MB
-
MD5
ad4f1ac6c52c88592345b186523c69cd
-
SHA1
13a63f2ae9282a466586ab27ec166efb46db6b84
-
SHA256
d98cc6218b609296095f004a218418843c58e172046dc3aae43f92adcb49106b
-
SHA512
88bbeb6df0619a308478a8d77fde1e0ef00d2a144b25653f77b5a8c31d0ba833a5e162d2188fdad3d346cb7714f6006d262fb444021937aa0fc62e475105d8fa
-
SSDEEP
196608:xxnTNzjsOzc7TGHscDgcXbIdslX38dgFYJzj:nNztzQlcDPXus98d9Jzj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d98cc6218b609296095f004a218418843c58e172046dc3aae43f92adcb49106b
Files
-
d98cc6218b609296095f004a218418843c58e172046dc3aae43f92adcb49106b.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ