Static task
static1
Behavioral task
behavioral1
Sample
0039300480bc498b9f1ffc28de6da146.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0039300480bc498b9f1ffc28de6da146.exe
Resource
win10v2004-20231222-en
General
-
Target
0039300480bc498b9f1ffc28de6da146
-
Size
123KB
-
MD5
0039300480bc498b9f1ffc28de6da146
-
SHA1
360a08860d5e39262757e3ef76bda79116067dc4
-
SHA256
7df1c0f159606558513181baba5551f7150a3fdbf06f2993af4c35d9966d17e3
-
SHA512
91086ac262ceed0ceb7fe678772169ac5eb2b62eb957bc1c293c42ef0d4c8f16278c0f8e6bbf590fc95b953752bbfed303b86098b1baeb29696269b8219720ee
-
SSDEEP
3072:kLoR7Ga77V73RqWAu/FxmXduLFGXqnC0IsK872v+hI:qYGa77V7hqy/fVnrJK8qT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0039300480bc498b9f1ffc28de6da146
Files
-
0039300480bc498b9f1ffc28de6da146.exe windows:4 windows x86 arch:x86
3fdd4abc8a68d8b384f37d5727de5f4e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
ws2_32
inet_addr
Sections
pec1 Size: 111KB - Virtual size: 572KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec2 Size: 1KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE