Static task
static1
Behavioral task
behavioral1
Sample
ce99198ad3803a989043a983a29b2c016051faff1e9679378f12c61b1cfe7b7e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ce99198ad3803a989043a983a29b2c016051faff1e9679378f12c61b1cfe7b7e.exe
Resource
win10v2004-20240319-en
General
-
Target
ce99198ad3803a989043a983a29b2c016051faff1e9679378f12c61b1cfe7b7e
-
Size
700KB
-
MD5
428f7957dc8c3f09fe919bb47cc676b6
-
SHA1
5b6b7d75e860db1528751479b521c59f8bd61eeb
-
SHA256
ce99198ad3803a989043a983a29b2c016051faff1e9679378f12c61b1cfe7b7e
-
SHA512
32d8d45002565fa04f52f4a93e057768d4e7c45221ccd703eedf68f7ef97eaff3a599bdfe0a2c0a7bf627ed05e09c5414dd6d37f4c934cc54f3ad28175c3716a
-
SSDEEP
6144:MkgiPA6RyPeaAfbAfNtTAfMAfFAfNF3NYN2eaAfbAfNtTAfMAfFAfN:4iP/mNtuhUNF9YrmNtuhUN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce99198ad3803a989043a983a29b2c016051faff1e9679378f12c61b1cfe7b7e
Files
-
ce99198ad3803a989043a983a29b2c016051faff1e9679378f12c61b1cfe7b7e.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rpUrErbd Size: 8KB - Virtual size: 8KB
pEnXDayu Size: 12KB - Virtual size: 12KB
yYWNRtWL Size: 40KB - Virtual size: 40KB
UeBpIIBU Size: 4KB - Virtual size: 4KB
MErlHrhe Size: 4KB - Virtual size: 4KB
ZmReTqVu Size: 4KB - Virtual size: 4KB
tVVYuapu Size: 12KB - Virtual size: 12KB
skxfXvQV Size: 4KB - Virtual size: 4KB
fPFTSSpq Size: 8KB - Virtual size: 8KB
SHrakIKn Size: 396KB - Virtual size: 396KB