Static task
static1
Behavioral task
behavioral1
Sample
f99197d94ef448fdc0dcfc4557b77fe0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f99197d94ef448fdc0dcfc4557b77fe0N.exe
Resource
win10v2004-20240802-en
General
-
Target
f99197d94ef448fdc0dcfc4557b77fe0N.exe
-
Size
64KB
-
MD5
f99197d94ef448fdc0dcfc4557b77fe0
-
SHA1
e0d4d2478d7c412074e29d7ba4020c9a066c9a09
-
SHA256
9d467caeb3b3acca2b4851df7ee5391a50287b170f382eb6f111f7b709d556fb
-
SHA512
ad1dda862e8a26bb18c6d8a2b96e1d185d0e7ce026392e7460b93411794b23363f112e5831d53f95e1348f819175b2c35a851efcc5d8b7b80c46f8378ee91014
-
SSDEEP
768:EOI2oYwWwEP19N+OtK1/NSzMY8ONz6kZmx3TW/1H5WrUZEgruCHPkJLzt1SZIk7J:ESoEHRzP7Zf4rUXruCHcpzt/Idn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f99197d94ef448fdc0dcfc4557b77fe0N.exe
Files
-
f99197d94ef448fdc0dcfc4557b77fe0N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ