Static task
static1
Behavioral task
behavioral1
Sample
398cf33839fb41c3d563ee0ec84b639b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
398cf33839fb41c3d563ee0ec84b639b.exe
Resource
win10v2004-20231222-en
General
-
Target
398cf33839fb41c3d563ee0ec84b639b
-
Size
29KB
-
MD5
398cf33839fb41c3d563ee0ec84b639b
-
SHA1
5b63194470c44103dbbb74b0808ee4c1233c557f
-
SHA256
22959a2a753fabc7bad2d3bb3a1180536b7bd36882f6ef9d22fdc85d6b60866d
-
SHA512
b7bfc9d861708cbc7bd2dda9da5ca654bdd5fe9d1681ba4699bf2995177e4a19b173562d534b2bab63462dfc0c795b67acdd830aa172b4524b621f8a981d88ac
-
SSDEEP
768:4KaCfOsSrcqqIvbhxeYIZKweiwR8UkYK2:4KaWpL1I9zweik8UkQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 398cf33839fb41c3d563ee0ec84b639b
Files
-
398cf33839fb41c3d563ee0ec84b639b.exe windows:4 windows x86 arch:x86
70a693aec4f19b6a7cb8b2986b750918
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadContext
GetTickCount
Sections
.text Size: 1024B - Virtual size: 762B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ