Static task
static1
Behavioral task
behavioral1
Sample
98d8cf3c816aced3f26de2f837f2a15e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
98d8cf3c816aced3f26de2f837f2a15e.exe
Resource
win10v2004-20231222-en
General
-
Target
98d8cf3c816aced3f26de2f837f2a15e
-
Size
380KB
-
MD5
98d8cf3c816aced3f26de2f837f2a15e
-
SHA1
044eeb8c3c925c05aa8866e8a565c8b218897e19
-
SHA256
d663cd788627ded4eff0b6a27e6888929e82dc94fc0e144bd0e5d5cde9f00d35
-
SHA512
95c8e25f9d214a27431a68f4d17c2fed31f4d39e51fffafe1bdd15db7c604bb5bf0901490ad2f2782380787550fb92ad0a11a187db6b154edeae543f40a5a44b
-
SSDEEP
3072:Ol/is9Ul60w6Rn0/u8QlJ3Drw0I5DS5DUrcduIvEPzrc77OWw8x8cqLu:KTI60HRkzQ/teDgDUrINvSc769/cKu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98d8cf3c816aced3f26de2f837f2a15e
Files
-
98d8cf3c816aced3f26de2f837f2a15e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE