Static task
static1
Behavioral task
behavioral1
Sample
970c9879fa57c32270536b9c6930707b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
970c9879fa57c32270536b9c6930707b.exe
Resource
win10v2004-20231222-en
General
-
Target
970c9879fa57c32270536b9c6930707b
-
Size
82KB
-
MD5
970c9879fa57c32270536b9c6930707b
-
SHA1
f8bc446d850e018170873ef76264e4a0d32accaa
-
SHA256
e88c0c455863499f5a29a96cc7ad1a46eb773b31ccd75b306adfbd456c31c581
-
SHA512
55413d6a5f5c33e91ba16929245a1fda7407217a0a0bd1081480feef43102de1bb7b845085a0460b30c9ac24b2194fb70a87126261af6cc44f59804a2c6929df
-
SSDEEP
1536:FaG6RgYyLd3WhB4VaW78p8pyU8wNy7PZD0fr9fxmmwr4AuHaiM2:Q/Qd3n78O18N6j9pmmwfu6iH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 970c9879fa57c32270536b9c6930707b
Files
-
970c9879fa57c32270536b9c6930707b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ