Static task
static1
Behavioral task
behavioral1
Sample
c989c04a3b5155fe96b8486089f92b3f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c989c04a3b5155fe96b8486089f92b3f.exe
Resource
win10v2004-20240226-en
General
-
Target
c989c04a3b5155fe96b8486089f92b3f
-
Size
907KB
-
MD5
c989c04a3b5155fe96b8486089f92b3f
-
SHA1
1004a3d829287e6869c64d1322c8faae8b619b20
-
SHA256
a6b1d2453e4c4bc8dae056a9504a16e4123547a2f578647e051808106767acd6
-
SHA512
eca2dac0f81727bf65ec729ed7a873a280cd20d5204480d344e031cccd44c9fcf0e43b006dd1155fcfd9b5ee6576489b2c463904c973b208222786410e4387cb
-
SSDEEP
12288:S+BgCPS3bCQZzksGVbkSWFhOog0CEu4mHuA3ac/49ePjVDa/ZS1:SogCPSx8chF3VFmuA39wka/ZS1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c989c04a3b5155fe96b8486089f92b3f
Files
-
c989c04a3b5155fe96b8486089f92b3f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 720KB - Virtual size: 719KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ