Static task
static1
Behavioral task
behavioral1
Sample
d3ff6371bb3fd402d10800ff6e0b07cab54cedb448e15387e3f6c005053128b6.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d3ff6371bb3fd402d10800ff6e0b07cab54cedb448e15387e3f6c005053128b6.exe
Resource
win10v2004-20230220-en
General
-
Target
d3ff6371bb3fd402d10800ff6e0b07cab54cedb448e15387e3f6c005053128b6
-
Size
3.0MB
-
MD5
461534d00f06e065a5386c8d7e7dcfd0
-
SHA1
53ac73c7348275366a25b5e3e8f4e0faf6923974
-
SHA256
d3ff6371bb3fd402d10800ff6e0b07cab54cedb448e15387e3f6c005053128b6
-
SHA512
93cc35ac8ca4bc7560b0a46373780f1841af60cf60042db0435769c3c75165530d9cfc439220c17e0b02fc3362b78a27471206f81a3af0b4d792c2a6c787d647
-
SSDEEP
49152:ozvhPlZ9y9skueGcG7vi8tdS+t/QVGaEomlDY6+fD3VHPKx4XEJ/73RB:ivNlZ9yfue83OzXmq6K5HPKx4XMT3R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3ff6371bb3fd402d10800ff6e0b07cab54cedb448e15387e3f6c005053128b6
Files
-
d3ff6371bb3fd402d10800ff6e0b07cab54cedb448e15387e3f6c005053128b6.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 3.0MB - Virtual size: 97.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE