Static task
static1
Behavioral task
behavioral1
Sample
99fde299d7699dc64c4ea181786c7ffa.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
99fde299d7699dc64c4ea181786c7ffa.exe
Resource
win10v2004-20231215-en
General
-
Target
99fde299d7699dc64c4ea181786c7ffa
-
Size
35KB
-
MD5
99fde299d7699dc64c4ea181786c7ffa
-
SHA1
537c01472d6117a80a9ddf04e6f51099369fffbf
-
SHA256
4dcf441a408d89c92bc0d9ac26d010e5eb2dee5cb40f6da9f3490919709f6172
-
SHA512
ab564e54091937a128a48dde268acd32c9989cd748846876618fd008f39907c5dabe0022de94b08c493bf93c620dfa4e393c1990dec4977d9083b23faba61f34
-
SSDEEP
768:+DE/zZ5kQInFqoFUl85seW6mKlpCawo1KGjxX9UI:DxoFUl85seWhKlQ5whxX9UI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99fde299d7699dc64c4ea181786c7ffa
Files
-
99fde299d7699dc64c4ea181786c7ffa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.SECURE Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SECURE Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SECURE Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE