Static task
static1
Behavioral task
behavioral1
Sample
438d6de838d55f8340cfe3cad8d7d928e1e18d5fb6d4a6b4a36044b32b10ee71.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
438d6de838d55f8340cfe3cad8d7d928e1e18d5fb6d4a6b4a36044b32b10ee71.exe
Resource
win10v2004-20240508-en
General
-
Target
438d6de838d55f8340cfe3cad8d7d928e1e18d5fb6d4a6b4a36044b32b10ee71
-
Size
99KB
-
MD5
8daf6f17f967140d5d0de90f737eb527
-
SHA1
cb4b4e76d20c48674ac5022e13fc16a0e8226eb6
-
SHA256
438d6de838d55f8340cfe3cad8d7d928e1e18d5fb6d4a6b4a36044b32b10ee71
-
SHA512
d3205d9b3b29ae80e4ac74113d99c38a6cc1a6438292e80c3f5f9d5ceeaacb2910aecd57960009edbec1a064b558c1f00956639489307e2755f3c037b858d7a0
-
SSDEEP
1536:GlcGTZQSnHEGm5IWCM0kZzJ1BO6J6wCdd4gBoQc27ME5IWCM:GuGVPi5bZVO4gBoQc0MQ5b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 438d6de838d55f8340cfe3cad8d7d928e1e18d5fb6d4a6b4a36044b32b10ee71
Files
-
438d6de838d55f8340cfe3cad8d7d928e1e18d5fb6d4a6b4a36044b32b10ee71.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ