Static task
static1
Behavioral task
behavioral1
Sample
699c3146a33677dec30fa6fa66ea8989.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
699c3146a33677dec30fa6fa66ea8989.exe
Resource
win10v2004-20231215-en
General
-
Target
699c3146a33677dec30fa6fa66ea8989
-
Size
253KB
-
MD5
699c3146a33677dec30fa6fa66ea8989
-
SHA1
caf96dfad67f8e086b7ac75d6212a7b0f4672d16
-
SHA256
713dffcfee5ec609767d4cd54f2633dff0a8ffa30359c381c5d43866fedfef91
-
SHA512
5b29dd90842ef481ab786a89c33c1509c230c39feff8586b0320956cae7b13ff6d247b87e37f6e16cf411f9d2d4438a57cc6f436f15444b1e58e8f208cb85071
-
SSDEEP
6144:kaE0KS58POFW/aCBp72OPJGQxw0/Xx/NwLy:kPS58POFWVbDGQxVwLy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 699c3146a33677dec30fa6fa66ea8989
Files
-
699c3146a33677dec30fa6fa66ea8989.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 252KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE