Static task
static1
Behavioral task
behavioral1
Sample
038388ff79269ad7f99e4f999645fd7e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
038388ff79269ad7f99e4f999645fd7e.exe
Resource
win10v2004-20231215-en
General
-
Target
038388ff79269ad7f99e4f999645fd7e
-
Size
385KB
-
MD5
038388ff79269ad7f99e4f999645fd7e
-
SHA1
0a9e3253447f0f339c327f0e87eaacdc7890d86f
-
SHA256
713f0d5c7587ff726897d28b4cf12cd91bb97476bf0d9ed6663758e373157d7b
-
SHA512
2c49181b16b9e7613523e2f409656ba3bb91da0b05ba6dcc3abd75744aaa8a03c017abe2c159361b8af5600eae619f13b92cde1c622e4f7f92698d5b34e6d12c
-
SSDEEP
12288:iQgQXE+kMZ7KXlOlU73ABD7OQ50MORnlrYgB:pPE+kMBulyU7Q2fnrB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 038388ff79269ad7f99e4f999645fd7e
Files
-
038388ff79269ad7f99e4f999645fd7e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ