Static task
static1
Behavioral task
behavioral1
Sample
99c2868dabb10d829fecb517347c69d99db9813a431a9cbdc2ecc77afc9b912a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
99c2868dabb10d829fecb517347c69d99db9813a431a9cbdc2ecc77afc9b912a.exe
Resource
win10v2004-20240802-en
General
-
Target
99c2868dabb10d829fecb517347c69d99db9813a431a9cbdc2ecc77afc9b912a
-
Size
64KB
-
MD5
0f5f2f3676ed8630d71514e33842ef12
-
SHA1
cddfa2185b92bff68a1db9d756aed6943b38406c
-
SHA256
99c2868dabb10d829fecb517347c69d99db9813a431a9cbdc2ecc77afc9b912a
-
SHA512
4fb49d2a4ff5328f22bbd892375dc634e3bbb4d0449334e5c18b266845da1f77821f305931ec7be445bf7a9f2575b42418334e062e7b66d7cde12a51e8c02207
-
SSDEEP
768:m8EiNYb//09DJMd8yCp1WacD68S2WgMB+iQj3RSjdw8kqMqf/1H5EXdnhKJDrY8P:PEmc/M9DJMuyd1/8d0boRXvlkYE8Rm0Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99c2868dabb10d829fecb517347c69d99db9813a431a9cbdc2ecc77afc9b912a
Files
-
99c2868dabb10d829fecb517347c69d99db9813a431a9cbdc2ecc77afc9b912a.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jfbbql Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ