Static task
static1
Behavioral task
behavioral1
Sample
3a304507c5be084e1dba1d471b9c065c316a6e1da4f8e2462fb25dc333f8a09d.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
3a304507c5be084e1dba1d471b9c065c316a6e1da4f8e2462fb25dc333f8a09d.exe
Resource
win10v2004-20230621-en
General
-
Target
3a304507c5be084e1dba1d471b9c065c316a6e1da4f8e2462fb25dc333f8a09d
-
Size
830KB
-
MD5
00914f35c787428b08ce3709595b8017
-
SHA1
744537a4d8bc22572fbc1037d9b8d3b37149b4a4
-
SHA256
3a304507c5be084e1dba1d471b9c065c316a6e1da4f8e2462fb25dc333f8a09d
-
SHA512
80d4b1c3e3481525aedbf5f490a3a27085a0f32d1efa891a7ec86667afaad70a6acb99a6c5a6987d234c3ebb37454676529e70f6d91da2c4ec95d8ffc14da458
-
SSDEEP
24576:dtOQUbxzMqSutsraXV8ZemvhOqWlvhAfjTC86naEas0X:dtOrxznSgsuwvhEGenvas0X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a304507c5be084e1dba1d471b9c065c316a6e1da4f8e2462fb25dc333f8a09d
Files
-
3a304507c5be084e1dba1d471b9c065c316a6e1da4f8e2462fb25dc333f8a09d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 89KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 370KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE