Static task
static1
Behavioral task
behavioral1
Sample
0349cb8b7d65bb987d6cad778cde14f5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0349cb8b7d65bb987d6cad778cde14f5.exe
Resource
win10v2004-20231215-en
General
-
Target
0349cb8b7d65bb987d6cad778cde14f5
-
Size
264KB
-
MD5
0349cb8b7d65bb987d6cad778cde14f5
-
SHA1
b05848a5ac0b16f0976c6a76077d88e4931f669e
-
SHA256
e51a87b6b20a139f30595e6943d6fcc6e745b07a9eb9f8d8ec8fe2f4407cb15e
-
SHA512
74755c88d4f0e06fa4568d01c25519650cca18b9454f1f909989ce50e22d61eba9a43165cd929eb3a6082fe573b8772a3adf0988cf62bf73da7ea87fa75af318
-
SSDEEP
1536:Zwv65zrI7gx6gX7Xl13hkLb7ZLWiQgwF9Gkcpsn5/NlBwtSBZNGYdAFIe9yMSK/m:ZEAf0o58LbxzuDOvppf1oCD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0349cb8b7d65bb987d6cad778cde14f5
Files
-
0349cb8b7d65bb987d6cad778cde14f5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE