Static task
static1
Behavioral task
behavioral1
Sample
02d98e0779581cb00fc913a9e33300cb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02d98e0779581cb00fc913a9e33300cb.exe
Resource
win10v2004-20231215-en
General
-
Target
02d98e0779581cb00fc913a9e33300cb
-
Size
422KB
-
MD5
02d98e0779581cb00fc913a9e33300cb
-
SHA1
e255c686f9e627a75940d83c9c3d07260e054bc6
-
SHA256
2ddb089eb8bc362adc7323565fa6545ebff59a0e3b50e135daf364d6bf70bbfd
-
SHA512
f533ecb29e7422c99be94a2834e62c7f8f2644bdea9bb9b15299fc5428ebe809e810b12d79cdde9f68aa414bc6e0a9fb697376be9d7a51eddd52c6bfe2ee49b8
-
SSDEEP
12288:ysHIB7QkKRaug8yeikCykaAOl13l0Pz8MBqI8:ysHU7+h5yeilykkln0PzZBqI8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02d98e0779581cb00fc913a9e33300cb
Files
-
02d98e0779581cb00fc913a9e33300cb.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 243KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ