Static task
static1
Behavioral task
behavioral1
Sample
0361b23892a4fdc304be076331060ffc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0361b23892a4fdc304be076331060ffc.exe
Resource
win10v2004-20231215-en
General
-
Target
0361b23892a4fdc304be076331060ffc
-
Size
796KB
-
MD5
0361b23892a4fdc304be076331060ffc
-
SHA1
18d98906188a044df9287512ca920d112a5bd5a5
-
SHA256
13aecc86469e77b254c660ccd52058b39af57c80cad9a02425419d803d1279da
-
SHA512
c925425bce07b65bb4f3cb4261377ca2792b98af705e6d9c67b54c44d21d19a6b1dcc0605cfb0235a686df312c51680a79364984c8cc5f9781025d61325c2f44
-
SSDEEP
24576:0TIx+9iipJw1RdY47dMur/dS8lLHgZpJEMjpG8LKCdw43:0TILLdY47dZrVSCLHkJEMgiKr43
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0361b23892a4fdc304be076331060ffc
Files
-
0361b23892a4fdc304be076331060ffc.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 402KB - Virtual size: 401KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 196KB - Virtual size: 346KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yvs Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE