Static task
static1
Behavioral task
behavioral1
Sample
385d4d30086cdd5a2aa73c602eff3f50.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
385d4d30086cdd5a2aa73c602eff3f50.exe
Resource
win10v2004-20231215-en
General
-
Target
385d4d30086cdd5a2aa73c602eff3f50
-
Size
176KB
-
MD5
385d4d30086cdd5a2aa73c602eff3f50
-
SHA1
56fdb616c1e69d9c7e0c4401d33f820a40063614
-
SHA256
55231c428eeedbd29b08ae703768e4b4cfe74fdc808f1c17c3029403b210bd84
-
SHA512
08e8cc25004a4b02404f15dccbdf0c7e7bea282fefaf4a371c6bbc0871a7d14b61173d47968821577cc2ecf2a4d6022ad314d7427dab55b4f75b665ca02c3f10
-
SSDEEP
1536:WtMHEqQfCO2Atrz5wseAt2JejqgjbdZuR9Zyyirm/0I0u1G3mHhTsdpsb9hCPWJ1:WukfaAJwnHAbdMZyyvsI0xp4CeJ1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 385d4d30086cdd5a2aa73c602eff3f50
Files
-
385d4d30086cdd5a2aa73c602eff3f50.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 359KB - Virtual size: 358KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ