Static task
static1
Behavioral task
behavioral1
Sample
0377f1a60cec37e060434d8637ddd3e9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0377f1a60cec37e060434d8637ddd3e9.exe
Resource
win10v2004-20231215-en
General
-
Target
0377f1a60cec37e060434d8637ddd3e9
-
Size
37KB
-
MD5
0377f1a60cec37e060434d8637ddd3e9
-
SHA1
f8a9b886aa372dd874771896ab7c6b5c0303fb3c
-
SHA256
dd6a3ed7abfdba446877531331f6071badffa0e8863454cc98511e12e684f399
-
SHA512
bceb5014e28cbd0f8e698b8d22d3a532112e0434b17c3dc04cedf5c2fa38fac8d559d225f0835dd31a2a748f45ee7afdd6544ea584823d27698a588f6bc0c434
-
SSDEEP
768:n9S3D4h1wWH2+SkmFAh0ty1IhB+j4pt8DtWKVKnpRKwRMGK2iLD+c:9QkhW4Sz0BIhk8pt84baUK2iP/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0377f1a60cec37e060434d8637ddd3e9
Files
-
0377f1a60cec37e060434d8637ddd3e9.exe windows:4 windows x86 arch:x86
4cb46614cb4685657365f53eb7bba72a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
Sections
.MPRESS1 Size: 34KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 841B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE