Static task
static1
Behavioral task
behavioral1
Sample
388b3905546e2a00b2c068dad9279bd6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
388b3905546e2a00b2c068dad9279bd6.exe
Resource
win10v2004-20231215-en
General
-
Target
388b3905546e2a00b2c068dad9279bd6
-
Size
19KB
-
MD5
388b3905546e2a00b2c068dad9279bd6
-
SHA1
8010da4a8f985d59f3f45d631c4b609b72bef1f9
-
SHA256
17e694e4cf98c119a7851004f9aa297790ff6017527daf2d41711a565991bdb7
-
SHA512
d34cdca455f4098136e37dc6e70098d82eb5ba5e3f414c884900184ce7c96fd40509372dfee020de076e973d2cc44ce5fdf4c295176ece0dd38fbfd1fade9614
-
SSDEEP
384:OkD+PVEwoUlEcF9V7yHT+PAxqKtmZQ1G6ndFO7XbXOF1:yPJoSEY7m+PAxQ6nbeeF1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 388b3905546e2a00b2c068dad9279bd6
Files
-
388b3905546e2a00b2c068dad9279bd6.exe windows:5 windows x86 arch:x86
5c32b7495659a4a5854cd5d797092512
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
SetUnhandledExceptionFilter
LoadLibraryExA
GetEnvironmentVariableA
GetLocalTime
FreeEnvironmentStringsA
SetEnvironmentVariableA
GetTimeZoneInformation
GetEnvironmentStrings
LoadLibraryA
QueryPerformanceCounter
GetLastError
GetSystemTime
FreeLibrary
GetWindowsDirectoryA
GetVersion
ExitProcess
LocalFree
FormatMessageA
ReadFile
CreateFileA
VirtualAlloc
GetModuleHandleA
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
user32
wsprintfA
KillTimer
SetTimer
MessageBoxA
GetWindowRect
GetClientRect
GetWindow
ole32
CoUninitialize
CoCreateInstance
StringFromGUID2
CoInitialize
CoTaskMemRealloc
CLSIDFromString
oleaut32
LoadRegTypeLi
LoadTypeLi
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ