Static task
static1
Behavioral task
behavioral1
Sample
989285bab0b2c13c026400ceb6d51bce.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
989285bab0b2c13c026400ceb6d51bce.exe
Resource
win10v2004-20231215-en
General
-
Target
989285bab0b2c13c026400ceb6d51bce
-
Size
59KB
-
MD5
989285bab0b2c13c026400ceb6d51bce
-
SHA1
8d91905a046c28fc6aae80f4904b4c0c60a858f0
-
SHA256
2517cd7aaf61ccc14636a8643f54b0fd84997a32e56d942ae29c45373508b172
-
SHA512
b51c3cd2260dec271d23be501d6bcf5c293bdf89c85a6e616c78400a6ed6fa6123926b49cec7d91b624d86ea1b38586bafdc5e9d5caab391ff602af820590ff5
-
SSDEEP
768:hhBrqnEik7Zp2RZ/HG3YSHnFH7rphhr9XZtSPZw1E4s3M2UAps4f0VDY2Xr:f9yEik1QRdHGlzO4s3BHps4Qk2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 989285bab0b2c13c026400ceb6d51bce
Files
-
989285bab0b2c13c026400ceb6d51bce.exe windows:29188 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
arizarrr Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ziiirrqy Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rabrrara Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rqqjyzbz Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ