Static task
static1
Behavioral task
behavioral1
Sample
39226ed99c1c543e95e6c0ef66ac2628.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
39226ed99c1c543e95e6c0ef66ac2628.exe
Resource
win10v2004-20231215-en
General
-
Target
39226ed99c1c543e95e6c0ef66ac2628
-
Size
401KB
-
MD5
39226ed99c1c543e95e6c0ef66ac2628
-
SHA1
f9ff578fa29fa643b75248a665474547f33f9cc9
-
SHA256
33c15ff3bf0c5341ce5b70a092cf16918877c549f6df80357a203c885c954e42
-
SHA512
7166e00ff35d957d40b99a60de9092862fc528181e3e63ab4589b86fc5b429f9e7cd95638188bfe7356f1953412be0b1e0fd045650f7f807b8ef7fcfc61d7ff4
-
SSDEEP
6144:rD+Q4REhNGuTiEIzPiHrZRYRBh2j0Ru3wmVub38CoG0obp6wAT4u39a7ivJoxJjC:rJflhIzPavgh9RugmzCoG9bAL39k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39226ed99c1c543e95e6c0ef66ac2628
Files
-
39226ed99c1c543e95e6c0ef66ac2628.exe windows:4 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: 208KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lzw626 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE