Static task
static1
Behavioral task
behavioral1
Sample
c998d7af2ffedef83062c80788aa5f64.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c998d7af2ffedef83062c80788aa5f64.exe
Resource
win10v2004-20240226-en
General
-
Target
c998d7af2ffedef83062c80788aa5f64
-
Size
805KB
-
MD5
c998d7af2ffedef83062c80788aa5f64
-
SHA1
d1a50ee0ad7ecd0b894fdcb43b3e59aa29b80985
-
SHA256
28bef43d0fe8acdb2f65fe95c988d012be2070653da31e36a0e15472048c3f2e
-
SHA512
d6f366d4f3ae860e0df651af9173da0cfc92be20bb333e8c6398c4be4a6518c79e2004a3c33d18c1cc85039397677705a44beebb6212a4013b74945b75e39c58
-
SSDEEP
6144:UZfec9EbXDk6RkdKWnmy+g4VrG1VVE+Ih/UOPSe570Szp3/uHOJnmy+g4VrG1VVp:UZWtI6RkzKupOB0fOJKupOB0vQuuh4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c998d7af2ffedef83062c80788aa5f64
Files
-
c998d7af2ffedef83062c80788aa5f64.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ