C:\dinexowehol42\hub_37\tarat95-lopifaba jako.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9983a38e6819767696e2445474941d7b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9983a38e6819767696e2445474941d7b.exe
Resource
win10v2004-20231215-en
General
-
Target
9983a38e6819767696e2445474941d7b
-
Size
56KB
-
MD5
9983a38e6819767696e2445474941d7b
-
SHA1
499a0b6a81e5c9f03f5d866807af47f777b1ae4b
-
SHA256
5d5eec72676217e2ad9a288d77407f795d13b14d25c9d363de93f8a27b0ee94f
-
SHA512
2cbceb662b6bdfcd53071c03d9ee525c6beae963a268c8d3dd482384ac30be6fe80c1e3a10c7fd3ff8d5064d8111fb46b389bf33d66c01f66f6e22acdfaab887
-
SSDEEP
1536:kxfb59PgCfsJXuDKxZ0vD1z3IXWiYop5KBWnpu:kxPPHf7sgpz3SWic0nc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9983a38e6819767696e2445474941d7b
Files
-
9983a38e6819767696e2445474941d7b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 539KB - Virtual size: 538KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 39.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ