Static task
static1
Behavioral task
behavioral1
Sample
394b16e942ede1161c982ea59e96535dec7078ec1e2cccf474a1a37b7c802368.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
394b16e942ede1161c982ea59e96535dec7078ec1e2cccf474a1a37b7c802368.exe
Resource
win10v2004-20240226-en
General
-
Target
394b16e942ede1161c982ea59e96535dec7078ec1e2cccf474a1a37b7c802368
-
Size
14KB
-
MD5
8d42952df62a627fd1c911efee33508d
-
SHA1
b85f457970d75b77d805e46fb3ff3e8261865e75
-
SHA256
394b16e942ede1161c982ea59e96535dec7078ec1e2cccf474a1a37b7c802368
-
SHA512
fd2ef439d95aee2634bf034fbf8cb1360b60bdbe2f6e7c380cb5bee7523b98ae34d2935ee7a3c9ebbd46ee78eff2c4fb57103750fb2e75d70ab9c205ffcdf734
-
SSDEEP
384:Eed67WDa5Nj5e1w5jyuitttttttrfmAbDE045H:Ee4yQe1w4tttttttbzA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 394b16e942ede1161c982ea59e96535dec7078ec1e2cccf474a1a37b7c802368
Files
-
394b16e942ede1161c982ea59e96535dec7078ec1e2cccf474a1a37b7c802368.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ