Static task
static1
Behavioral task
behavioral1
Sample
0357721be5caa10e49a41c89f60bfc35.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0357721be5caa10e49a41c89f60bfc35.exe
Resource
win10v2004-20231222-en
General
-
Target
0357721be5caa10e49a41c89f60bfc35
-
Size
741KB
-
MD5
0357721be5caa10e49a41c89f60bfc35
-
SHA1
88b91cafde0c515ef679a0657c2ad64cc3fda887
-
SHA256
fe0bd6ec68a34d1894bf3e99be4c5803c180be0c90688e98c132f64ac32b23de
-
SHA512
3a52660bb47409098a4885e4ed3dcc3d6cf0955680bc43ddd90605247109afccd4ca3b20a2092931fddc80613a5f6a4a4032c3ec07f40fbaa1db2a4f9d71e8fc
-
SSDEEP
12288:LRyTY+2U4uan/8RdW5A0zyxuJwQ5oAlK+Gx/vZuIkAbQQ52LYRg08y5rDRJ:l6iU4ucwdW5A2RJr/k3/vcIkA33P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0357721be5caa10e49a41c89f60bfc35
Files
-
0357721be5caa10e49a41c89f60bfc35.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 644KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 35B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ceshi Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE