Static task
static1
Behavioral task
behavioral1
Sample
396ee68c10a0282e292ed10a09ba1b5b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
396ee68c10a0282e292ed10a09ba1b5b.exe
Resource
win10v2004-20231215-en
General
-
Target
396ee68c10a0282e292ed10a09ba1b5b
-
Size
376KB
-
MD5
396ee68c10a0282e292ed10a09ba1b5b
-
SHA1
0b2e9f75b2619f42ce6258489d9f0a9004684cad
-
SHA256
cfd346f9fee13dbc5665c56bcc6712b15c0ba82ac0c78b4593029d56e2116320
-
SHA512
f96fd4026eafd824438f643f845befdb03957f0cd97695df0da5725599ac4dc2469aac9154e2ccb82867a12edade8da2f0871b8b3b4d2951906cbdfde80a6d4d
-
SSDEEP
6144:hNTV3hOClyp67BO1A5fMnVW5GJZ2tNYLj8MfshALqfqqw2:hNrO+QOcVzYKj86saqfqQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 396ee68c10a0282e292ed10a09ba1b5b
Files
-
396ee68c10a0282e292ed10a09ba1b5b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 111KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 145KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE