Static task
static1
Behavioral task
behavioral1
Sample
97b8e7c4e9602a8649a6cc8e65a128c0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
97b8e7c4e9602a8649a6cc8e65a128c0.exe
Resource
win10v2004-20231215-en
General
-
Target
97b8e7c4e9602a8649a6cc8e65a128c0
-
Size
28KB
-
MD5
97b8e7c4e9602a8649a6cc8e65a128c0
-
SHA1
1a3d3681467313228fbc163b26b0d03f8b4ec1c2
-
SHA256
cabf3a7d91aef765ae11ae5627b7a674fb804124ee899f295d89ff15e6f3dfef
-
SHA512
64f94067e40a9344e390cadd4eda54c5293627465adf9648e5a5f10db707f428e5d1aa536731d9af0e3e74e3ab7613e31791ddd1068c57c8e0045d03a7801be3
-
SSDEEP
192:tbkJAd9738R65D2hTuayNo/R7KAjDl1z4xvdaRVpdK0FHMRXKRQzDIfkN26T0sEL:mO8R65eT4No1KEjhMRXKRgDGoT0sEL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97b8e7c4e9602a8649a6cc8e65a128c0
Files
-
97b8e7c4e9602a8649a6cc8e65a128c0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
. Size: 16.1MB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ