Static task
static1
Behavioral task
behavioral1
Sample
385acf4b3c16efda435187a7a1590278.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
385acf4b3c16efda435187a7a1590278.exe
Resource
win10v2004-20231215-en
General
-
Target
385acf4b3c16efda435187a7a1590278.exe
-
Size
261KB
-
MD5
385acf4b3c16efda435187a7a1590278
-
SHA1
fb40353248dae9a22c33ee38b074a322b895317f
-
SHA256
41bae281ab6f35f88bb69cf109b2901a3994c3f9c8f3d494a30c84bb6ca2b9a9
-
SHA512
b487e65d5bdca50a16d964a9a6dee10bc84838bf498a4c689dc14a78f5dfdef3779106f5e328e16cfac1ec5dfc24fd337a3a33765e8a9058f50239e60e90d7c0
-
SSDEEP
6144:t/6Iwqcnca6QrgUT6qK7Ni0GYD2nMT5vSIxM7:/TccfMgUTci0eMT5y7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 385acf4b3c16efda435187a7a1590278.exe
Files
-
385acf4b3c16efda435187a7a1590278.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 612KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 260KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE