Static task
static1
Behavioral task
behavioral1
Sample
99745ceb04dcf0f37c991477ebc60c77.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
99745ceb04dcf0f37c991477ebc60c77.exe
Resource
win10v2004-20231222-en
General
-
Target
99745ceb04dcf0f37c991477ebc60c77
-
Size
162KB
-
MD5
99745ceb04dcf0f37c991477ebc60c77
-
SHA1
d19fb4b45aa9f5e51b212e9a7e2f4b2f87b67a1b
-
SHA256
6290a30e45d59d5a5d7c92bafd6bc47c1e3245e37442369ce7ffd5d59438b0bc
-
SHA512
c52d0267999fef4541c953e2a6a8f64169ad109072aa01f3ce4edb3fdf4e3ca4f27121d18e66dc7de522a0cffdd19275a7814a2a6169f51c91fe069b0b820c88
-
SSDEEP
3072:5hkc71EyqOWNvGl88GSCMAVq5vkC5HDxZX805lLmF8p8cYmWzHRdmEyntv:7X1EyqOWvGRGCAc5THvs03mLbpytv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99745ceb04dcf0f37c991477ebc60c77
Files
-
99745ceb04dcf0f37c991477ebc60c77.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
KHXG Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UXAQ Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE