Static task
static1
Behavioral task
behavioral1
Sample
438b7c0c3d66be190b78a3f68ba24dbf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
438b7c0c3d66be190b78a3f68ba24dbf.exe
Resource
win10v2004-20231222-en
General
-
Target
438b7c0c3d66be190b78a3f68ba24dbf
-
Size
2.2MB
-
MD5
438b7c0c3d66be190b78a3f68ba24dbf
-
SHA1
c2d63109a3d864fd71fa9d4866b76d55047998f4
-
SHA256
aaafcb33767a129522434a05326d55bd54b5336119e3c31203490344ff6b220e
-
SHA512
19e7e02a65c07292b964708da5f3b09bbcf905ff21740222e99c266086d1df9cbcb2133662454112d94fcf8f51f317acb88db0ff6387f26412eb190e7e43bee7
-
SSDEEP
49152:cZkV46F3qWknSOVYP1Jl+9LpcZmx4V5B5OwsqGhvm:cZc464WgV61Jo9LQsqGhv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 438b7c0c3d66be190b78a3f68ba24dbf
Files
-
438b7c0c3d66be190b78a3f68ba24dbf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 276KB - Virtual size: 273KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 409KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ