Static task
static1
Behavioral task
behavioral1
Sample
994fa62e0f238b0c561fbe16812e679c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
994fa62e0f238b0c561fbe16812e679c.exe
Resource
win10v2004-20231215-en
General
-
Target
994fa62e0f238b0c561fbe16812e679c
-
Size
231KB
-
MD5
994fa62e0f238b0c561fbe16812e679c
-
SHA1
8bf3cf8c018a952460f9e0eaaed9411d6af4827c
-
SHA256
def173ff16b412b169affb354b46e536b7e9ab0c1e4dc4e01bb0fe732a7d9f71
-
SHA512
359703248bfa052b03044cb0ad48c1e255c27c8752f6681bb4b14dbdc6660b844f0c611dd8e224361019aa38a8b912a76eed3e74aff669955d9e4da1f7974800
-
SSDEEP
6144:97JvUJSWuZBAqiEjxsbJ4gn8xQSA9CrfcOE0Ui3yvz:91vUJSWugKjAp86bWUi3yvz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 994fa62e0f238b0c561fbe16812e679c
Files
-
994fa62e0f238b0c561fbe16812e679c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 688KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 230KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE