C:\RaislooxJukuaeonhomoexAgesbagay\KopsyumaboqisturfreplowLoadFaux\emfoghoYawnadoinkwoyagdueawpeux.pdb
Static task
static1
Behavioral task
behavioral1
Sample
96f2ff21b3f62a2bbbb3b35b56654672.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
96f2ff21b3f62a2bbbb3b35b56654672.exe
Resource
win10v2004-20231215-en
General
-
Target
96f2ff21b3f62a2bbbb3b35b56654672
-
Size
195KB
-
MD5
96f2ff21b3f62a2bbbb3b35b56654672
-
SHA1
3da2ad772b8a9dc435a9e4041d6da0f3aa18a379
-
SHA256
2fde840dba09ed742db9f1ec0e8e28f8ebc921c07bad91a0c22a841d954a92cf
-
SHA512
ba9c428b97d4cdda9a8baf4087c2d6bb88e02d8828073bb6bcbdd688365ae2bd79865e06b2e30dcce4dd652a816eec3afd0c0ab58c98ae79e247b0b51d876a7b
-
SSDEEP
6144:2xuFrHlF9yJCckMYR+Lf4SpE5qJ0X5jrj1if:JH4URbZu0Xxrjk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96f2ff21b3f62a2bbbb3b35b56654672
Files
-
96f2ff21b3f62a2bbbb3b35b56654672.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Exports
Exports
SetAnchorOriginal@12
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.refee Size: 512B - Virtual size: 127B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ