Static task
static1
Behavioral task
behavioral1
Sample
996cea1885fc6f05bfc6acb8a6c7a5f1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
996cea1885fc6f05bfc6acb8a6c7a5f1.exe
Resource
win10v2004-20231215-en
General
-
Target
996cea1885fc6f05bfc6acb8a6c7a5f1
-
Size
3.4MB
-
MD5
996cea1885fc6f05bfc6acb8a6c7a5f1
-
SHA1
cd2b499fb10b7ee43b68f3ec50d69837a06ed4bd
-
SHA256
2c5894384fefafc3dc714c5ea862e567f560f88f56e018f4ebea9c3dd89ec82c
-
SHA512
149739b774d961373087817f8f769b8866c40b8ac474f81a6184e0fcb44cde889c0137c2f7cf9f47db2bebb6f187a0f0d484b2bb3b9dd63f6fda77d424e2b94f
-
SSDEEP
49152:brerQZbd2berQZbd2berQZbd2berQZbd2berQZbd2berQZbd2Hi:erQZdrQZdrQZdrQZdrQZdrQZB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 996cea1885fc6f05bfc6acb8a6c7a5f1
Files
-
996cea1885fc6f05bfc6acb8a6c7a5f1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ