Static task
static1
Behavioral task
behavioral1
Sample
798e99b83793f3559ba730cececd3b6c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
798e99b83793f3559ba730cececd3b6c.exe
Resource
win10v2004-20231222-en
General
-
Target
798e99b83793f3559ba730cececd3b6c
-
Size
82KB
-
MD5
798e99b83793f3559ba730cececd3b6c
-
SHA1
3c99b66689f0b7b9f162f31077cb12525aa464e1
-
SHA256
f43f5dd9076b70d7c20122cdc966703ad3da73e16b16f0dbf0a3c941daf11400
-
SHA512
34319c10c7e94a33ec9140deb6ad3c5aefe8ec13a852a94c479e1fd9e06b823834f69dd0666228d5c0fed8c76a919324d81245c1cd10af29f6eb3db4c858a54d
-
SSDEEP
1536:Fns9EQuLsTkR+Cviah2QKRaK0de93/OTS2tvDz7qh:dDLyUXvKRapde93/OTRR3O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 798e99b83793f3559ba730cececd3b6c
Files
-
798e99b83793f3559ba730cececd3b6c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ