Static task
static1
Behavioral task
behavioral1
Sample
358053eb88dc859d255900ecfcd98914.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
358053eb88dc859d255900ecfcd98914.exe
Resource
win10v2004-20231215-en
General
-
Target
358053eb88dc859d255900ecfcd98914
-
Size
47KB
-
MD5
358053eb88dc859d255900ecfcd98914
-
SHA1
c2c48dcee1a379e1ae2a673e7ac31d02ca9ca8a6
-
SHA256
924d76e3282d4e8c541dd68fe73fd0aacfeea37a5087b476f642d9f229d4113e
-
SHA512
21735a0776d1180427d01b7b3e30915717fe76ff37fb36dbe04a3c908c654dd5a5a10ca664899b162577b900cf48cf250e5bdf5ba3b260b2f81785ccd9770cbb
-
SSDEEP
384:pvff+Vn3PEPIPPARW84ojCQ5V9yNpMCHFx1tPU0Ie7ATk0VRlVGQ116qb:pH2t3cg44o8s0NPUdk0HDG416
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 358053eb88dc859d255900ecfcd98914
Files
-
358053eb88dc859d255900ecfcd98914.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.neolit Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SEFCMD Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.PTData Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ