Static task
static1
Behavioral task
behavioral1
Sample
Malicious_3b36e967a01746bd34fb8e12855a4b45ba40e9b53cea56f2c55e52612b45f80d.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Malicious_3b36e967a01746bd34fb8e12855a4b45ba40e9b53cea56f2c55e52612b45f80d.exe
Resource
win10v2004-20230621-en
General
-
Target
Malicious_3b36e967a01746bd34fb8e12855a4b45ba40e9b53cea56f2c55e52612b45f80d.exe
-
Size
56KB
-
MD5
dd27652f27c587b7e5e4498e85300e3a
-
SHA1
6768d00581944d1b21a38e8580404da900f999d7
-
SHA256
3b36e967a01746bd34fb8e12855a4b45ba40e9b53cea56f2c55e52612b45f80d
-
SHA512
b2e5ccfd550aa9d906aeb15baa3c93c7de325a2545dac91e47ff1ecab240061a49ac97d33665307b4a6e1783be15804b904e109d775fb085039bf2bf1b1c649f
-
SSDEEP
768:9WUe0zJCo6ECb9RleOTJwYf2mGGAHwvLtBu3iqboOYYYYYYYYYYYYYYYmYy6w6cU:9W4sHPbvleOTeY+TGx7WlK8C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Malicious_3b36e967a01746bd34fb8e12855a4b45ba40e9b53cea56f2c55e52612b45f80d.exe
Files
-
Malicious_3b36e967a01746bd34fb8e12855a4b45ba40e9b53cea56f2c55e52612b45f80d.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ