Static task
static1
Behavioral task
behavioral1
Sample
96404f39829ed18648d219cb4b0e169a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
96404f39829ed18648d219cb4b0e169a.exe
Resource
win10v2004-20231215-en
General
-
Target
96404f39829ed18648d219cb4b0e169a
-
Size
385KB
-
MD5
96404f39829ed18648d219cb4b0e169a
-
SHA1
938ed56e902d6e12321880b4016070780e11d3b1
-
SHA256
a19d5dcaf448f06258c23f97f97f8ece3116759d900c2b8220f50158defb8d7c
-
SHA512
ee11b86e355398a49250b046b00e46bf9324067bedb735c0b9437b3c5bae083e0dfb8fb040cb6a20a4c9b8d0e7f19e6741b4d104d389259dfd3e19d47ef42789
-
SSDEEP
6144:Bg3zmIf2Wrq+ZIXAapO3di3fSziTmzXeLaZoOb4PTLs0OhTB:GzHG++9OK6r5ZoObmTLsrB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96404f39829ed18648d219cb4b0e169a
Files
-
96404f39829ed18648d219cb4b0e169a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ