Static task
static1
Behavioral task
behavioral1
Sample
998533b7e68541ff6ee7394daa292de1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
998533b7e68541ff6ee7394daa292de1.exe
Resource
win10v2004-20231215-en
General
-
Target
998533b7e68541ff6ee7394daa292de1
-
Size
3KB
-
MD5
998533b7e68541ff6ee7394daa292de1
-
SHA1
40f60b1357b107aa80a9469c2c1024fa7596579e
-
SHA256
e4f213191f674bd8cdd59724c3202f02edb163b4d7c8d2c19be93e529383eb75
-
SHA512
145430a0e7629cccb564b5f9059feb411f4c3e2f835f2e2b1e8a69e71e10fd249fb0b2ba9d60b2ad4af01c57cec14b961453fa3fe76530bb798a839803a5d68e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 998533b7e68541ff6ee7394daa292de1
Files
-
998533b7e68541ff6ee7394daa292de1.exe windows:4 windows x86 arch:x86
d559e00ba5310306d9edcf1dfa7b176c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateRemoteThread
ResumeThread
Sleep
VirtualAllocEx
WriteProcessMemory
CreateProcessA
Sections
.text Size: 1024B - Virtual size: 694B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 214B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE