Static task
static1
Behavioral task
behavioral1
Sample
00b39f41493aedb17cf95b186f3bdf79.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
00b39f41493aedb17cf95b186f3bdf79.exe
Resource
win10v2004-20231222-en
General
-
Target
00b39f41493aedb17cf95b186f3bdf79
-
Size
917KB
-
MD5
00b39f41493aedb17cf95b186f3bdf79
-
SHA1
f882689719c855631762414582581f6c62c626c8
-
SHA256
b31b4146c05718aedfca049e6f2d6653998a9e10f3a2ec12af1cafa83965996e
-
SHA512
1ca30f31480c999b9c093cd3f7a63b585766ed6fd1bc506e2d962d816438f5d02b0ea66ef18c14214091e704ea312ec971b9c121808f0d8bacc3ef773f0ac7c7
-
SSDEEP
24576:xhmpyAG0WA++MuLVgvGE7qD7AAVZjwDbGd6KiAchtL+1O:xcQzZvGVzIbsmAWtr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00b39f41493aedb17cf95b186f3bdf79
Files
-
00b39f41493aedb17cf95b186f3bdf79.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
21 Size: 604KB - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE