Static task
static1
Behavioral task
behavioral1
Sample
98d96f9067b4b5a1c6beb699f8a1b24d3347b9d54bee43c99549d44ace01a9b7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
98d96f9067b4b5a1c6beb699f8a1b24d3347b9d54bee43c99549d44ace01a9b7.exe
Resource
win10v2004-20240226-en
General
-
Target
98d96f9067b4b5a1c6beb699f8a1b24d3347b9d54bee43c99549d44ace01a9b7
-
Size
373KB
-
MD5
22f058c63433aead41e7802c6925999b
-
SHA1
cad8e3ebe1c411b0c745dd978df033585fc3347c
-
SHA256
98d96f9067b4b5a1c6beb699f8a1b24d3347b9d54bee43c99549d44ace01a9b7
-
SHA512
ba7e3a8b4ebf279bf3ed5aa49d858842e409f3bb3adaf974de62dc7ef39aed2bd0d301da3c294b372a77b2f2b4695736adf89f36c0db803742bbefcca4b5de44
-
SSDEEP
6144:OjCffjC1ipPpp1lOeRV1ZTrhUoP4g+rBi+GLq7oy6hkTs3jELrTlBUqgQaV:O2ffG4pPphBRVjeoP4gPzIoy6dzErrYR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98d96f9067b4b5a1c6beb699f8a1b24d3347b9d54bee43c99549d44ace01a9b7
Files
-
98d96f9067b4b5a1c6beb699f8a1b24d3347b9d54bee43c99549d44ace01a9b7.exe windows:5 windows x86 arch:x86
e79793d85727d1f141aca9d8ba099f47
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
LoadBitmapW
advapi32
ReportEventA
Sections
Size: - Virtual size: 184KB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE