Static task
static1
Behavioral task
behavioral1
Sample
0381e1c1a8bca995e8ac4cfeca117151.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0381e1c1a8bca995e8ac4cfeca117151.exe
Resource
win10v2004-20231215-en
General
-
Target
0381e1c1a8bca995e8ac4cfeca117151
-
Size
9KB
-
MD5
0381e1c1a8bca995e8ac4cfeca117151
-
SHA1
6fcc6017701cf64f481b17d0b684be6356857e38
-
SHA256
87290cc7e25a0c406565ffba8b19c92a2c9629945478b2e0290ec6b3213ec314
-
SHA512
9a8b66cc490d64a733d0427a570471b998ed3afb5f0127ecc774532c8bb90b573ea2016a310450a4b2f85b0960cf2aada69a6ea943de3c8773de029dd1797bd1
-
SSDEEP
192:ZVVPP7kOhXaBNWPJqzQCXYE+kift1mn7b0:DVPP2NgTCXckil1mf0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0381e1c1a8bca995e8ac4cfeca117151
Files
-
0381e1c1a8bca995e8ac4cfeca117151.exe windows:4 windows x86 arch:x86
1ac8207e43ff82b5df900d53f6b7d113
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
GetTempPathA
WriteFile
lstrcatA
shell32
ShellExecuteA
advapi32
RegCreateKeyA
RegSetValueExA
Sections
.text Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE