Static task
static1
Behavioral task
behavioral1
Sample
97f7374e7e955d770153baaa23a95d12.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
97f7374e7e955d770153baaa23a95d12.exe
Resource
win10v2004-20231215-en
General
-
Target
97f7374e7e955d770153baaa23a95d12
-
Size
189KB
-
MD5
97f7374e7e955d770153baaa23a95d12
-
SHA1
f67e9d27411b9cc667149e9214471f7c8f94504b
-
SHA256
91bff2df7413407547d590eb697358979fa122e7113d0db0792b731ecb2e1282
-
SHA512
d23562f3c1c94be3f721de5f723dc14f76eb0dad7663b9f6f51e334316976f5ed922cac0b45b77f35b69ec8297a1018b18d5b1903fc0a10148dba0241317b2e4
-
SSDEEP
3072:NQZI1eedE9xURrAIzc+GaXe7hCMw68AY+L6mFuV3To32F+tPI0MziF4Vdeq:NQZshEhX9jClu6JDo3QHGzq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97f7374e7e955d770153baaa23a95d12
Files
-
97f7374e7e955d770153baaa23a95d12.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rawdat Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE