Static task
static1
Behavioral task
behavioral1
Sample
998b45e979c170f8e0ea5d7415e9a176.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
998b45e979c170f8e0ea5d7415e9a176.exe
Resource
win10v2004-20231215-en
General
-
Target
998b45e979c170f8e0ea5d7415e9a176
-
Size
91KB
-
MD5
998b45e979c170f8e0ea5d7415e9a176
-
SHA1
67deb109335ccf6fa652a2b5f59b25cdc2333d2c
-
SHA256
cc369e3b3e9244f36e69af6cf6bae1a8ba960177e55083c32123cbe3da09f8d8
-
SHA512
a8501d6a504f54b2992b64e783092862470ad0c1df9e63c2a05ee94eb2cba7bc8bf37e09bac8b65aacbc92774a9dafd52b518e6cd6f5ffe9511751afa2b48e03
-
SSDEEP
1536:J6jrWdKuE8qtMhM2BU6cijgCzhSfV4/hZiMpCMdT9nsEw8e0c0OY0aUUR1Gkde:MF1SFU6detpMpCMdZm8eN0LFX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 998b45e979c170f8e0ea5d7415e9a176
Files
-
998b45e979c170f8e0ea5d7415e9a176.exe windows:4 windows x86 arch:x86
c8c6d433d99a5cca36a6447fcb79d459
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
SetLastConsoleEventActive
VDMOperationStarted
CopyLZFile
FreeConsole
VerSetConditionMask
EnumSystemLanguageGroupsA
GetConsoleScreenBufferInfo
SetConsoleCursorMode
LoadLibraryExA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 67KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE