Static task
static1
Behavioral task
behavioral1
Sample
97a9f83d7878a6fe52b0841c8577f50f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
97a9f83d7878a6fe52b0841c8577f50f.exe
Resource
win10v2004-20231215-en
General
-
Target
97a9f83d7878a6fe52b0841c8577f50f.bin
-
Size
336KB
-
MD5
97a9f83d7878a6fe52b0841c8577f50f
-
SHA1
280e81b29316480a7a0a8b94312330eb6af565cd
-
SHA256
13cfa1289354a833ada2a85c9cd5ff9332926a7dc7c9452cace6112108a40226
-
SHA512
1b70439f33aa35f29d0896b6227015f7a1897f5646f249b0451bf66f7b01e1230a6c0de9615046203f4bda12918120954d104b89c29b7e4e908b47a06dde30e4
-
SSDEEP
6144:T6C6YPOodm30xwcP9n2U82xZkckexoS8pm97WQPd9:T6edm3xc4L24cVoS8c97Wy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97a9f83d7878a6fe52b0841c8577f50f.bin
Files
-
97a9f83d7878a6fe52b0841c8577f50f.bin.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 324KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ