Static task
static1
Behavioral task
behavioral1
Sample
2988c28918d14591a3389ca159ba0e88.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2988c28918d14591a3389ca159ba0e88.exe
Resource
win10v2004-20231215-en
General
-
Target
2988c28918d14591a3389ca159ba0e88
-
Size
91KB
-
MD5
2988c28918d14591a3389ca159ba0e88
-
SHA1
2edd02e1cde90b91f026c305c319387fa900b04e
-
SHA256
2699219402d2dcc8c80bcd11e1e44a0ecd4217c15cf6b5479e82e162b1ce5a97
-
SHA512
d80259df2bae9e5e84f648a704ae5d6cc5bdaf20d0e17c50c7e5640fcce0819c1f07f61db65dbd15baa765c54b651416ce0c82daba122525980ddb8bfb69b7f8
-
SSDEEP
1536:IFAutcCNS1mgnd2y1nrPlGiCcCBEulwFFAutcCNS1mgnd2y1nrPlGiCcCBEulw3:IpWC4YgBPlGiyll6pWC4YgBPlGiylli
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2988c28918d14591a3389ca159ba0e88
Files
-
2988c28918d14591a3389ca159ba0e88.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 35KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 741B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE