Static task
static1
Behavioral task
behavioral1
Sample
b38f30630c599a64feface7bdd4e2040.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b38f30630c599a64feface7bdd4e2040.exe
Resource
win10v2004-20230220-en
General
-
Target
b38f30630c599a64feface7bdd4e2040.exe
-
Size
809KB
-
MD5
b38f30630c599a64feface7bdd4e2040
-
SHA1
7447fe8bff79606dc0d3d720b43ae1abf3d0405c
-
SHA256
19d89eb7dffdde1f430586fd0fbcb87e5e6b7bfc3ccb9ee1a80dfcf92c30c94b
-
SHA512
dd4f34f467757091ec3b3f5d977a0623aceb86285b6d4466d26db4711818741dccd39eced4307b4697918eabebbc196f599670783457d83f01d21886865b306d
-
SSDEEP
12288:UO2B0xTGlxNqvNu2hZ+nUEsn9c3O5g2GHfVPBZHFOGlJvDhVqF57noN6/8:UOLaVUH999Ij/NFOGrOLj/8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b38f30630c599a64feface7bdd4e2040.exe
Files
-
b38f30630c599a64feface7bdd4e2040.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 807KB - Virtual size: 806KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ