Static task
static1
Behavioral task
behavioral1
Sample
98da15225379eb66033eba13e217227d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
98da15225379eb66033eba13e217227d.exe
Resource
win10v2004-20231215-en
General
-
Target
98da15225379eb66033eba13e217227d
-
Size
364KB
-
MD5
98da15225379eb66033eba13e217227d
-
SHA1
c06bf0085299b8763ce39ec566c722e24fb1f7a3
-
SHA256
e0fc010197d3d8342a4d45d39d6cb2928c0af20513ef268493bf5905682be038
-
SHA512
2fa23b4cff8a8a80df0a8ab41484efe6bc9ab97971f0905aa3643484bd1d0c375b41ec6d3df6a6699da76a2aabaf6b85f6e7b4ed2090509a40bc7b27e7fa0d27
-
SSDEEP
6144:c+cKx8njj8Ifz61MUkYjIvO+U4HNqBi1:c1KwYWO1MUkYjI591
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98da15225379eb66033eba13e217227d
Files
-
98da15225379eb66033eba13e217227d.exe windows:4 windows x86 arch:x86
dcc61916b11b23cb9328223ebf9cc2e8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
lstrcatA
PostQueuedCompletionStatus
ReplaceFileA
MultiByteToWideChar
GetLogicalDriveStringsA
WriteFileEx
SetDllDirectoryA
GetProcessHeaps
VirtualAllocEx
GetFileAttributesExA
GetFullPathNameA
GetExitCodeProcess
FindNextVolumeMountPointW
OpenFile
ExitThread
GlobalFree
SetConsoleNumberOfCommandsA
GetPriorityClass
GetConsoleHardwareState
IsBadHugeReadPtr
SetStdHandle
hid
HidP_GetScaledUsageValue
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 716B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.didata Size: 176KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dedata Size: 4KB - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bbs Size: - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ