Static task
static1
Behavioral task
behavioral1
Sample
97601f450c48437a0985a5fdaf33fec74e46966ffd4e24c6f1d163685b9a0739.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
97601f450c48437a0985a5fdaf33fec74e46966ffd4e24c6f1d163685b9a0739.exe
Resource
win10v2004-20240226-en
General
-
Target
97601f450c48437a0985a5fdaf33fec74e46966ffd4e24c6f1d163685b9a0739
-
Size
96KB
-
MD5
b6b0705ab528455efb969fdab6f866a3
-
SHA1
ad395f0b9a713ee3f1b1b8617055caa8a8ade6cb
-
SHA256
97601f450c48437a0985a5fdaf33fec74e46966ffd4e24c6f1d163685b9a0739
-
SHA512
beb3be4d8062e02018d1a53c098d57d8fbb4f062c89e9f5a324c4eef33d5baf2cc6c074281c0c3c2e8ca7e21248dc49829a42b4d266df05f05c98def9a28ed6f
-
SSDEEP
1536:s3wdebJ3aFoIdFqATNrakJwRetWVZ/dKDTF0etRQ+GR5R45WtqV9R2R462izMg3W:swdebJ3aFoIdjONet+Z/dIZ0ete+GHrC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97601f450c48437a0985a5fdaf33fec74e46966ffd4e24c6f1d163685b9a0739
Files
-
97601f450c48437a0985a5fdaf33fec74e46966ffd4e24c6f1d163685b9a0739.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ