Static task
static1
Behavioral task
behavioral1
Sample
98acc3783eb96b0f70c64cef4ef9e41e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
98acc3783eb96b0f70c64cef4ef9e41e.exe
Resource
win10v2004-20231222-en
General
-
Target
98acc3783eb96b0f70c64cef4ef9e41e
-
Size
66KB
-
MD5
98acc3783eb96b0f70c64cef4ef9e41e
-
SHA1
4512e0ec2c87f6ef786173034031103639769b4f
-
SHA256
9fdfedcaae13f0b6edc71a253200b572cfe565fda8a2458f1e35cdbb9bdccd9e
-
SHA512
731b5b17b668386141e8c02aa3fe5047af12e3b599a458d841ed626da4adfaab072b505ec74835f6433c1afce20aa255fcc35be10e72fffd29bc9538419acdf1
-
SSDEEP
1536:gKx2/ng27OIWlAijk+vtd039qvrRdT/IAFJ492umhd46yT:VxU7PWyWq39c7IAhd46yT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98acc3783eb96b0f70c64cef4ef9e41e
Files
-
98acc3783eb96b0f70c64cef4ef9e41e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
haotian Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pepack Size: 26B - Virtual size: 26B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�� Size: 100B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE