Static task
static1
Behavioral task
behavioral1
Sample
99ac306ba27637132a760e80df7931fc4918234238a79b3fa3d646407e03aa4f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
99ac306ba27637132a760e80df7931fc4918234238a79b3fa3d646407e03aa4f.exe
Resource
win10v2004-20241007-en
General
-
Target
99ac306ba27637132a760e80df7931fc4918234238a79b3fa3d646407e03aa4f.exe
-
Size
6KB
-
MD5
e241d82588fdf19cc15a8f8b3e4f8ff0
-
SHA1
479b9486e4bb886e80c9558987691246195fc405
-
SHA256
99ac306ba27637132a760e80df7931fc4918234238a79b3fa3d646407e03aa4f
-
SHA512
e1d54dc4dec0b59042ee1cc67a964f96e9806d195fefe6a146cc260a42f1e3c84866101a37fe3487081b74d8f656e91b55ffb8bcc64a0381e4b07a4983dd0740
-
SSDEEP
24:eFGStrJ9u084Wg2nbShVkzv05bUI5VRIkLZMrvt6GBQAVN:is0DEbS7ksbUI5XfLnGBQu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99ac306ba27637132a760e80df7931fc4918234238a79b3fa3d646407e03aa4f.exe
Files
-
99ac306ba27637132a760e80df7931fc4918234238a79b3fa3d646407e03aa4f.exe.exe windows:5 windows x64 arch:x64
b4c6fff030479aa3b12625be67bf4914
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualAlloc
ExitProcess
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ