Static task
static1
Behavioral task
behavioral1
Sample
386b7f9a3f44bcc9a4962dc6a117cdfb727bcf12ee69bc84afbe6f88ed6290f0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
386b7f9a3f44bcc9a4962dc6a117cdfb727bcf12ee69bc84afbe6f88ed6290f0.exe
Resource
win10v2004-20240508-en
General
-
Target
386b7f9a3f44bcc9a4962dc6a117cdfb727bcf12ee69bc84afbe6f88ed6290f0
-
Size
128KB
-
MD5
67070a9d4223ab196ec4985b6b6fb8bb
-
SHA1
d5bb3656ab278e08ca0d93f0d72c81230843d938
-
SHA256
386b7f9a3f44bcc9a4962dc6a117cdfb727bcf12ee69bc84afbe6f88ed6290f0
-
SHA512
76d0322a5cee176ac444053e00b3d7d3721d2321597d6d37d944e1bdf14cffee931cfe5951e303739c0f636b0a6d7adfc475948dc9ba9bd54c57f88f8b5ac5af
-
SSDEEP
3072:XkrOOrAqasc7KX8J9IDlRxyhTbhgu+tAcrbFAJc+i:XJ3TKX8sDshsrtMk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 386b7f9a3f44bcc9a4962dc6a117cdfb727bcf12ee69bc84afbe6f88ed6290f0
Files
-
386b7f9a3f44bcc9a4962dc6a117cdfb727bcf12ee69bc84afbe6f88ed6290f0.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ