Static task
static1
Behavioral task
behavioral1
Sample
386c96cd0131b1e56009423be0f94733.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
386c96cd0131b1e56009423be0f94733.exe
Resource
win10v2004-20231215-en
General
-
Target
386c96cd0131b1e56009423be0f94733
-
Size
106KB
-
MD5
386c96cd0131b1e56009423be0f94733
-
SHA1
d9beba2258d657a9187e6ce62b24c0b98fd90759
-
SHA256
8caa31840da794e49d2485f0263a1d8a5464a6d0ed7c49d1cc4be3f90cfe6d99
-
SHA512
6cc48452ef1ee7ce7c56c5e648da6ee33cec8af6e123b4ecd107e609f8fbc84ebcafe82eee0d67fb2c2297f98e16be8c14f7f162d6b61efa61396bed1670ff09
-
SSDEEP
1536:I4nWDzvgtjZOAuzPl6++c5CAH0Hv7MVihUYtBS+OZeX3vUbxkoVta4TzG:IEWDUpuzPx+c4p75lBPfqCCw4e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 386c96cd0131b1e56009423be0f94733
Files
-
386c96cd0131b1e56009423be0f94733.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: - Virtual size: 953B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
. Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE