Static task
static1
Behavioral task
behavioral1
Sample
96f29fa97df9e71c7f485f8c9dfb302b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
96f29fa97df9e71c7f485f8c9dfb302b.exe
Resource
win10v2004-20231222-en
General
-
Target
96f29fa97df9e71c7f485f8c9dfb302b
-
Size
108KB
-
MD5
96f29fa97df9e71c7f485f8c9dfb302b
-
SHA1
813588d4c073344ecfc262888fc02fdeda972a4f
-
SHA256
cb82808cef4391f667934eb18d852c31c0a3a0242d61ee9a013132566bd64712
-
SHA512
6f22f510b0d03ae5a411f4a08db2be18aacadf1cd8a1e48bc9c7f8d89385bf5a398734f13ff85b3c0d6dda206e678b1777b5215f59dbf36c3cdbf5934dffdb83
-
SSDEEP
3072:pl2B1bxgZfYWtutHdhRj664Hrpsr4wVJzbbLBA:L2B1bOZweiHdb6tH1srzvvb9A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96f29fa97df9e71c7f485f8c9dfb302b
Files
-
96f29fa97df9e71c7f485f8c9dfb302b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.test Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE