Static task
static1
Behavioral task
behavioral1
Sample
128395bd689e5a64b5f72e7ff32f2c1c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
128395bd689e5a64b5f72e7ff32f2c1c.exe
Resource
win10v2004-20231222-en
General
-
Target
128395bd689e5a64b5f72e7ff32f2c1c
-
Size
32KB
-
MD5
128395bd689e5a64b5f72e7ff32f2c1c
-
SHA1
2210446fbbd2c0723695790f8e23313e826bbe1e
-
SHA256
38b0f4ab5e053027f66af85a8588ad24780b46d8d71c29113fe1d90a58ba821f
-
SHA512
09da3467bebc1c9e208278342077cd6d15e6cc89770d272f2f67bed4cefe388c9c2d6826c754cd2070b573da03156d3e61c9b13c8bc86ba8178d68f6bc48845a
-
SSDEEP
768:MXaKWYOWcpTtGdTZamoaiLlPhz44jUgpbhxH7m:MXwY8GdTk//BZtU2/H7m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 128395bd689e5a64b5f72e7ff32f2c1c
Files
-
128395bd689e5a64b5f72e7ff32f2c1c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
myow0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
myow1 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
myow2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE