Static task
static1
Behavioral task
behavioral1
Sample
389ec4ba489805877b0cc943d3b58170578cae105b513dda603114c371429420.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
389ec4ba489805877b0cc943d3b58170578cae105b513dda603114c371429420.exe
Resource
win10v2004-20231025-en
General
-
Target
389ec4ba489805877b0cc943d3b58170578cae105b513dda603114c371429420
-
Size
261KB
-
MD5
c20324151ed883c3ce2641e6639501de
-
SHA1
f6c8efabdedff2a334da38842123072c8b1a41ca
-
SHA256
389ec4ba489805877b0cc943d3b58170578cae105b513dda603114c371429420
-
SHA512
af63b58b1c1d0b6fc6d54ec0a8555e29115321e739cb2bb2adca9694425ff6abff3b136253354f8bbdf4685539f012c42c5d59e5ba86a4957d74ef43864b8dbc
-
SSDEEP
6144:H+5bOI6AJI+n1czyKjindh7i6efLcu532k:WiNj+nPKjoqlfLcu4k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 389ec4ba489805877b0cc943d3b58170578cae105b513dda603114c371429420
Files
-
389ec4ba489805877b0cc943d3b58170578cae105b513dda603114c371429420.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 239KB - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE