Static task
static1
Behavioral task
behavioral1
Sample
98bcdaf83f32cc25d617160913ae1e16.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
98bcdaf83f32cc25d617160913ae1e16.exe
Resource
win10v2004-20231222-en
General
-
Target
98bcdaf83f32cc25d617160913ae1e16
-
Size
88KB
-
MD5
98bcdaf83f32cc25d617160913ae1e16
-
SHA1
6701b75bf11b513e62144dd62d643db5c3154ad4
-
SHA256
4c11ce89afd941c2dc0e39edf60631e121e9d6545c9b176dbdd521f49da612f8
-
SHA512
3c1d4c04830a95f31b3403b70a1224bcc81831ce5727fa9187d6a4a6d565a978c2f6598c7825a034f8c6bb5aaeb3d84b26841efbbdc27112bdcfacf4dd0bd554
-
SSDEEP
768:fwr6Tb6sumXOeqpGBvbmrWkHZtK83ngaXOBJs6907F48RASIeLp0ZxPJ0SJGd:f86TusSFKongRzF90p48+peLeDPJ0Sk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98bcdaf83f32cc25d617160913ae1e16
Files
-
98bcdaf83f32cc25d617160913ae1e16.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ