Static task
static1
Behavioral task
behavioral1
Sample
538ff45db8d1fe48e4a834a7556f9ddd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
538ff45db8d1fe48e4a834a7556f9ddd.exe
Resource
win10v2004-20231215-en
General
-
Target
538ff45db8d1fe48e4a834a7556f9ddd
-
Size
32KB
-
MD5
538ff45db8d1fe48e4a834a7556f9ddd
-
SHA1
832bce9d4ca71f924a047b3984255c5f64a9b0a2
-
SHA256
f7d4d192058ea2f4e251fcd5f98bab118ec479a4c8a16c25cd540f800e522855
-
SHA512
a94adb4621cd93852e1db9b12a6873c59ba445d1d52e627a8178053e1bd386dc5bab7f6ba39188dfac8b71ac20da842256abd56f59e16a019269f44b8a08d5ef
-
SSDEEP
384:ydRqbk/QceeF8CKDM2ONxVKwr8HM66f2JqyEO0ciYbCPzQ/fwNd5i:y7h/QceeF8CCuxMnHNJ0BYbgzdNdk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 538ff45db8d1fe48e4a834a7556f9ddd
Files
-
538ff45db8d1fe48e4a834a7556f9ddd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
. Size: 4095.9MB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ