Static task
static1
Behavioral task
behavioral1
Sample
98169b2b4ea83e6dc0859a91bbc0b757cb25149abad32d7fbd7a3fc89d3240c4.exe
Resource
win7-20240704-en
General
-
Target
98169b2b4ea83e6dc0859a91bbc0b757cb25149abad32d7fbd7a3fc89d3240c4
-
Size
2.2MB
-
MD5
b508d38a33d4aaf422e579383e1ecbba
-
SHA1
f756141c8245a30395c42a8ba9772e89907491f9
-
SHA256
98169b2b4ea83e6dc0859a91bbc0b757cb25149abad32d7fbd7a3fc89d3240c4
-
SHA512
6fecb681c4e5c7361aabe9111c4cff625e7791ac8e47c65f0d91b16ace51983b9881643e743d7629b6c6777586e19309670bdc89f8df14d54dd0d76f8ac2787d
-
SSDEEP
49152:QZtxFrv78H4B8TdljCrDVWj5Y6+GSRPOFG3KPB+M1W2OsijnEk:eLrT+4GYDV45YQWGFGaJ+wiAk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98169b2b4ea83e6dc0859a91bbc0b757cb25149abad32d7fbd7a3fc89d3240c4
Files
-
98169b2b4ea83e6dc0859a91bbc0b757cb25149abad32d7fbd7a3fc89d3240c4.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.6MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 832KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qnyegenp Size: 672KB - Virtual size: 672KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pyzrwskq Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE