Static task
static1
Behavioral task
behavioral1
Sample
96d50342db8038f2577817c08e1730f4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
96d50342db8038f2577817c08e1730f4.exe
Resource
win10v2004-20231215-en
General
-
Target
96d50342db8038f2577817c08e1730f4
-
Size
586KB
-
MD5
96d50342db8038f2577817c08e1730f4
-
SHA1
1c03d3e556783a49e8b1a585fc825ecd5b44bd24
-
SHA256
2e584ac69793ddbb064043747fa10caf4d969bf6e65d8dfaf68d1302bbb1cfca
-
SHA512
f4b69d553b673185fe7fb9cc68d687827d98556ef0ae0e37263c66748e2ccd912e9a1f84c23501e1c54ead3119149be35193b43a801d151978259fa82b14489b
-
SSDEEP
12288:wESTVGNd20hQW85d6F2itF3Z4mxxJ+jAh/078w5jAlCh:toIhQWclitQmXJ+ss7/lAQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96d50342db8038f2577817c08e1730f4
Files
-
96d50342db8038f2577817c08e1730f4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 252KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 317KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE