Static task
static1
Behavioral task
behavioral1
Sample
375d7c8fb64c1930d445059f184343bf6c15a79173156e0e539e8175c15b8973.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
375d7c8fb64c1930d445059f184343bf6c15a79173156e0e539e8175c15b8973.exe
Resource
win10v2004-20230915-en
General
-
Target
375d7c8fb64c1930d445059f184343bf6c15a79173156e0e539e8175c15b8973
-
Size
80KB
-
MD5
33f550ec938bf25b25d9f13683a22902
-
SHA1
0c435a29f9f10310818472f878adce3e7d9a2bdf
-
SHA256
375d7c8fb64c1930d445059f184343bf6c15a79173156e0e539e8175c15b8973
-
SHA512
06eb82c9e612cf10d717ca81375190acf97975edde897c7c1f14bd35b90ca40f1b04f21b87219d35fd7c40cee1f137e82c8f9650e81eaaebbfa069c6217d3c83
-
SSDEEP
1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOjb5sGE:GhfxHNIreQm+HiEb5sGE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 375d7c8fb64c1930d445059f184343bf6c15a79173156e0e539e8175c15b8973
Files
-
375d7c8fb64c1930d445059f184343bf6c15a79173156e0e539e8175c15b8973.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEC Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE