Static task
static1
Behavioral task
behavioral1
Sample
99b488b28428939266159b172bde3c00N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
99b488b28428939266159b172bde3c00N.exe
Resource
win10v2004-20240709-en
General
-
Target
99b488b28428939266159b172bde3c00N.exe
-
Size
22KB
-
MD5
99b488b28428939266159b172bde3c00
-
SHA1
9cb4a6cec62c4be22eefbfc7de7cfd82af2b28e9
-
SHA256
da6ad3ce9737e57dacea771ed2ce9a4d185f7d738a5e6327bfaf33e2cee42245
-
SHA512
7dc038ed96796a2775260253e14e2f92d0e688ed7a3ef984148e9f1f6c48bc39d1a1a0f3460662db2fd30b2959270fc2fd6cb0d9cc6f814709379b0cd663a791
-
SSDEEP
384:bbQ+n3LntdA0PsZDpNx6pIpfjk8zUnZxhmDblVIRQCJogvY8UJydNr:HQ+bntdUZD16pof4mulmDblVAQ4ogDjr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99b488b28428939266159b172bde3c00N.exe
Files
-
99b488b28428939266159b172bde3c00N.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 13KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE