Static task
static1
Behavioral task
behavioral1
Sample
99ce7027d17f07c42e649b30f75e01dc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
99ce7027d17f07c42e649b30f75e01dc.exe
Resource
win10v2004-20231215-en
General
-
Target
99ce7027d17f07c42e649b30f75e01dc
-
Size
1.1MB
-
MD5
99ce7027d17f07c42e649b30f75e01dc
-
SHA1
bf433b1496acae3c2454582fbc3861d69437a342
-
SHA256
062453ca94e4fac29fa624a5ca2643dad69c757d284fe8be8bca71ec129666c4
-
SHA512
afd9203489b6e4c4b702eddcd519c0a053b81e953a7fa9c704e2e1710b06a3ce46178ffcf842085bb695d183b2389bbc11e5f9a66d6498ad61ae71c5a881bd55
-
SSDEEP
24576:AseuZ1SX6WKknviaQoQG4N2DeeU/NdM/hP:AseJ1hb0ghP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99ce7027d17f07c42e649b30f75e01dc
Files
-
99ce7027d17f07c42e649b30f75e01dc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 938KB - Virtual size: 938KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 6KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ