Static task
static1
Behavioral task
behavioral1
Sample
377476602bca31dce625d9ef331eac3d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
377476602bca31dce625d9ef331eac3d.exe
Resource
win10v2004-20231215-en
General
-
Target
377476602bca31dce625d9ef331eac3d
-
Size
381KB
-
MD5
377476602bca31dce625d9ef331eac3d
-
SHA1
4b509a954a877471d5b75634a5f2b00209eceea6
-
SHA256
7952e30055ef67bc88712619668d92f45891ac02b2a47e8ec33d1a6ca58a6081
-
SHA512
99bcd1b7673fe6fa8c68e92d8f8c22bc38c29a2cf0b6f0ce9371870b5e023a5cd2db69801e17080bee4ce8860a38c95ee0eda997bf3368a5cee6d963dbcbef53
-
SSDEEP
6144:HWqLbum2rmclDXzsxF67rJaV9J3dxkIzTmn8l6Xf676ARp3LYx1NXOV5Cojq9h0q:2q+XDXzK4rq9xduIzTmn8wvf6p+1NCCz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 377476602bca31dce625d9ef331eac3d
Files
-
377476602bca31dce625d9ef331eac3d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 277KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37.3MB - Virtual size: 37.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ