Static task
static1
Behavioral task
behavioral1
Sample
387f047de762ade886eea5c65a92400d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
387f047de762ade886eea5c65a92400d.exe
Resource
win10v2004-20231215-en
General
-
Target
387f047de762ade886eea5c65a92400d
-
Size
152KB
-
MD5
387f047de762ade886eea5c65a92400d
-
SHA1
5e4be1ec8a54fdb7fce01190490d565915a27cb0
-
SHA256
53f459c92f7398328b673e72558176d9128994bdb93d2029d0d6494b1b72abd9
-
SHA512
eda306d291058aec4fb18883d85aca63ed6c68f5b4f6893826962d9787ca86d65420cb30dde52d1d9d51a71088bf2ad4a6ca5dbfb0a4a48a7f4e754988c012ae
-
SSDEEP
3072:813ZlVTi4/fozY90DnycN336MIafLiaD00wyDtERQW1ff+Olr5:813zf/QzYsny6qLOLia/wIKQQ++
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 387f047de762ade886eea5c65a92400d
Files
-
387f047de762ade886eea5c65a92400d.exe windows:4 windows x86 arch:x86
e304217fc16c011615a0ec22783cbfae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 44KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE