Static task
static1
Behavioral task
behavioral1
Sample
00ff00830fb0f4a608b6d26198149a76.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
00ff00830fb0f4a608b6d26198149a76.exe
Resource
win10v2004-20231215-en
General
-
Target
00ff00830fb0f4a608b6d26198149a76
-
Size
5.8MB
-
MD5
00ff00830fb0f4a608b6d26198149a76
-
SHA1
11cb569116caace9ec392bef46ed94d78bd23502
-
SHA256
bede32b0a096346477537ae0be3dcd68db7b2eff80121f8df47a0477ae1fac87
-
SHA512
98b8394d6b836cfbd7732b5f7fc2be3142b5b5f7ac0d34e8930cba9e63485c5be179ad49fd5bac5c9311ee9c3c2911b0906707a24c6ce9c3e9a70392c637498b
-
SSDEEP
98304:drQZnrQZnrQZnrQZ2SbrQZnrQZnrQZnrQZ2SJ:dr2nr2nr2nr2jr2nr2nr2nr2R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00ff00830fb0f4a608b6d26198149a76
Files
-
00ff00830fb0f4a608b6d26198149a76.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ