Static task
static1
Behavioral task
behavioral1
Sample
391f8baa0a580d76fea2f510f6308d12.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
391f8baa0a580d76fea2f510f6308d12.exe
Resource
win10v2004-20231222-en
General
-
Target
391f8baa0a580d76fea2f510f6308d12
-
Size
85KB
-
MD5
391f8baa0a580d76fea2f510f6308d12
-
SHA1
3e356b0fd1c39a3253f68ff4b237dc721554e307
-
SHA256
ec10498a7cacb38b8c2fc845919a2de646f69edde00c95136c86a6c2b6421a24
-
SHA512
fa66149a4bd85ebf0ad70be998be1270a77d1f2b4c49a8a1f527a8bb05c74c5ee6a97c53953c4c6f9cd3348cdf1436149de27909247836b4e3041c16c862a905
-
SSDEEP
768:XUSJnSHKV/AqeyDEmeER/wB2ZTOPAbTA/wM9wjFC67C7xjXes7TxR4KZgyHjCN:r9SqTh5lOYwlCE7ASbZghN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 391f8baa0a580d76fea2f510f6308d12
Files
-
391f8baa0a580d76fea2f510f6308d12.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ