Static task
static1
Behavioral task
behavioral1
Sample
98e23f1377e7102a41f292a80e94bac82149b020b3c843f8e703ebf602403b20.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
98e23f1377e7102a41f292a80e94bac82149b020b3c843f8e703ebf602403b20.exe
Resource
win10v2004-20240802-en
General
-
Target
98e23f1377e7102a41f292a80e94bac82149b020b3c843f8e703ebf602403b20
-
Size
6.2MB
-
MD5
bae9ab17d2b696e2aec2e1ad374eaf68
-
SHA1
cca2628db6a3448a2813acddb1d77b3896b883c9
-
SHA256
98e23f1377e7102a41f292a80e94bac82149b020b3c843f8e703ebf602403b20
-
SHA512
27d3670f8a19009a88474abdbde81dcc7ed17430655988b94024d7af99d6d29fc7114dc4cd0fab1ad43abd05008eee9c408c1e03ce19351179cbffaabec1c216
-
SSDEEP
49152:ag+kHMxMg+kHMK2RAR5FeA6wKoZ+m+QOo1X+/BD6Lpr0bFOm98vLQq56uLGpxc7d:a/MEpZ86KIgFOm9eLQqQuSbeTPPp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98e23f1377e7102a41f292a80e94bac82149b020b3c843f8e703ebf602403b20
Files
-
98e23f1377e7102a41f292a80e94bac82149b020b3c843f8e703ebf602403b20.exe windows:4 windows x86 arch:x86
3e4757b6c44f364955a909104e3b2b4d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
msvcrt
memset
comctl32
InitCommonControls
user32
MessageBoxA
shell32
ShellExecuteExA
ole32
CoInitialize
Sections
. Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lol 0 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.lol 1 Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 699B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE