Static task
static1
Behavioral task
behavioral1
Sample
387a327ef019d0f2196fb69a7b70a7c0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
387a327ef019d0f2196fb69a7b70a7c0.exe
Resource
win10v2004-20231215-en
General
-
Target
387a327ef019d0f2196fb69a7b70a7c0
-
Size
48KB
-
MD5
387a327ef019d0f2196fb69a7b70a7c0
-
SHA1
c3ad94b70962cf8eefbcfc898c1caddb0b2487e2
-
SHA256
79cb66fa1464549340ceb0249eb9bc921f7067ff9b5a83c3bd06f717f2c1ce80
-
SHA512
924decdd662be01239a26596a8ae99216682d6586a97541c65321dd0e6de54271147ad8c3c02a559fddcaec30c5a382f64e1e8352b56a00a39bf130fd47d3796
-
SSDEEP
768:amLv7IBUi3Px04CMJaFASQTcDl+jPicIKCVhfg6DG1WUtYqGh5LyRlu8jdlO:bLUBZ37C+sASQIPdhf9VUk5LWuf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 387a327ef019d0f2196fb69a7b70a7c0
Files
-
387a327ef019d0f2196fb69a7b70a7c0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ