Static task
static1
Behavioral task
behavioral1
Sample
0238a1223104330a81be9d769eb5798c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0238a1223104330a81be9d769eb5798c.exe
Resource
win10v2004-20231215-en
General
-
Target
0238a1223104330a81be9d769eb5798c
-
Size
179KB
-
MD5
0238a1223104330a81be9d769eb5798c
-
SHA1
bd4eee1127409a93958a3d329eb8a06764b0564d
-
SHA256
0837419ba7e2f54c8698690f2f0b01bb228dad027a51065eacc5a42c28feb7de
-
SHA512
dd6a91567263b395bc6799c86f74a2281a334b3208fe79d86c25ec1d047eed3c2308c4b8e2529a66f77f857ed0d5d9e48800bbe2b76b9df14a21f5d545d4a174
-
SSDEEP
3072:qu2DoP8iw+UeclXV//LdfJOS3NKUMPTgDOZJ8fz7dL72xwvGGnzIBN2MWxXbsk:qlDotRYdhJOS9KUGu7dgwvAN2bNj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0238a1223104330a81be9d769eb5798c
Files
-
0238a1223104330a81be9d769eb5798c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
\z'0 Size: - Virtual size: 536KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
\z'1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
\z'2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE