Static task
static1
Behavioral task
behavioral1
Sample
99ad8d8df05ddc21b4a90a1b0a2eff0f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
99ad8d8df05ddc21b4a90a1b0a2eff0f.exe
Resource
win10v2004-20231222-en
General
-
Target
99ad8d8df05ddc21b4a90a1b0a2eff0f
-
Size
12KB
-
MD5
99ad8d8df05ddc21b4a90a1b0a2eff0f
-
SHA1
3b5a0f40db78ba2e7f3feef382fd607e910117ee
-
SHA256
d47d192d4cd53c4d5d74a4c3cb35f5c4d76c5dccb956483870187ac777657fdf
-
SHA512
cb186fa7aea0aa1226ef3e4c9767a616564fc567337839b512441ccfa58b0dbca6530e4f5afff83badf1bc77d22df0b4c51389fa4aa4f7506cad74827dfb2979
-
SSDEEP
384:QHaj/vaz5vrwDi3jpRwODOwoEDCzUk2qgHP:y+Q5jUiQwoEDnLq0P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99ad8d8df05ddc21b4a90a1b0a2eff0f
Files
-
99ad8d8df05ddc21b4a90a1b0a2eff0f.exe windows:1 windows x86 arch:x86
09e744ec88d65ed44231c9044f6b8532
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMailslotA
DeleteFileA
EndUpdateResourceA
EraseTape
FatalExit
user32
CheckMenuItem
CreateCaret
CreateDialogIndirectParamA
CreateMDIWindowA
wininet
CreateUrlCacheEntryA
FtpGetFileA
FtpRemoveDirectoryA
GetUrlCacheEntryInfoExA
GopherFindFirstFileW
HttpEndRequestW
gdi32
CreatePalette
GdiGetPageHandle
GdiPlayJournal
GdiPlayScript
Sections
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE