Static task
static1
Behavioral task
behavioral1
Sample
97fa38ea5a2b643ba358f6a93faa9da6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
97fa38ea5a2b643ba358f6a93faa9da6.exe
Resource
win10v2004-20231215-en
General
-
Target
97fa38ea5a2b643ba358f6a93faa9da6
-
Size
385KB
-
MD5
97fa38ea5a2b643ba358f6a93faa9da6
-
SHA1
0b95fb9e0f1045e5836d4376c958a39f1c59e609
-
SHA256
60b4c6e978551bc59646a236d39b5698046b4c06bb153865739a98ede550c71d
-
SHA512
09d438126f2843d391afc480103506865a3010e93e4c5e0b48497f2b51d4484b029131e1d1065b079dda4b585ab610ed1da953043791d91c4c016150ace472dd
-
SSDEEP
6144:iZh4KOh5yI30vP7jg9Q9QiwDOiCefNpYjIOengxbsUgPBwR11IjAxQGPn3B:qh4PfK/gq9PSRRlpSIO04BgGCXO3B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97fa38ea5a2b643ba358f6a93faa9da6
Files
-
97fa38ea5a2b643ba358f6a93faa9da6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ