Static task
static1
Behavioral task
behavioral1
Sample
99f093cf9fd8a2fdeb609c9ec86e3af5267a0794e6bac15d1c5838d2a700fb4e.exe
Resource
win7-20240903-en
General
-
Target
99f093cf9fd8a2fdeb609c9ec86e3af5267a0794e6bac15d1c5838d2a700fb4e
-
Size
1.8MB
-
MD5
ef1412117a0aa964b11f5e5d4f535c46
-
SHA1
a9319c7c7c05d00d26f4b4b2740b61ce77dcb9d2
-
SHA256
99f093cf9fd8a2fdeb609c9ec86e3af5267a0794e6bac15d1c5838d2a700fb4e
-
SHA512
3f1638ab19758b9e33785d2ad8f330317ad1e6bdab0d66c6b1855d6f82ca821d27714c01fbaf56d5b9cd90d99c6245a4f84a774004d66d7ec228beeabb7dd28f
-
SSDEEP
49152:+UXM5pOFXNw+/CWX5hUUBdJ/8ceptKg/QCCR:+L5pMOGhFh43K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99f093cf9fd8a2fdeb609c9ec86e3af5267a0794e6bac15d1c5838d2a700fb4e
Files
-
99f093cf9fd8a2fdeb609c9ec86e3af5267a0794e6bac15d1c5838d2a700fb4e.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bcckehas Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
witmjdeu Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE