Static task
static1
Behavioral task
behavioral1
Sample
99dadbf94d71bc4c24563bac7c97168a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
99dadbf94d71bc4c24563bac7c97168a.exe
Resource
win10v2004-20231222-en
General
-
Target
99dadbf94d71bc4c24563bac7c97168a
-
Size
955KB
-
MD5
99dadbf94d71bc4c24563bac7c97168a
-
SHA1
5d0db8626fca8fe784249d3b8f9db5fc7f5dfb1c
-
SHA256
cce96d4a98d3e233aaa86970efa5466eb3b2ef38652b6ff9cf4f24f32daf9525
-
SHA512
961275f0e95902a7c1b8a80502568b3d4a37c19f39009a45e0c10333a753d0d933bc16b435e13de3b1a11984bafb962ab1f09347ea9c28a77e55a4d81f2a947e
-
SSDEEP
24576:5DVYpRy9JLJoiJkYKqVZjH2NyjRJuN9Uo1pv:5wkLJpJRKtyzY9UwB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99dadbf94d71bc4c24563bac7c97168a
Files
-
99dadbf94d71bc4c24563bac7c97168a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 801KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 80KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE