Static task
static1
Behavioral task
behavioral1
Sample
3d6129dd4043375d08af0326de7152966bdd03e9df1f24ba8846e9616f4a503c.exe
Resource
win7-20230712-en
General
-
Target
3d6129dd4043375d08af0326de7152966bdd03e9df1f24ba8846e9616f4a503c
-
Size
1.4MB
-
MD5
2f72fa8f007c775e6c90569cfa7979a3
-
SHA1
d2daa7d7e26151db5a93d9287b4d0eac884bd8b0
-
SHA256
3d6129dd4043375d08af0326de7152966bdd03e9df1f24ba8846e9616f4a503c
-
SHA512
9af4f186560bfd6d1605adb5a18dc3d9abbeea7ddbe77bf8d4ea9c717c75031ea34e3b21e1190a2000b62c23362e61f4b975df3df77910f01ea2b3ddb91850a9
-
SSDEEP
24576:/Xan4fosf+fsntZ1yKXqKRHO5VuI86MUcTaeBRkzazzfP7+AIGS1UNyVWYxRd:/e4V+0ntZ1yKXFHoVuN6MTaeHb+r1zrX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d6129dd4043375d08af0326de7152966bdd03e9df1f24ba8846e9616f4a503c
Files
-
3d6129dd4043375d08af0326de7152966bdd03e9df1f24ba8846e9616f4a503c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.ChongZi Size: 2KB - Virtual size: 4.4MB
IMAGE_SCN_MEM_READ
xxx Size: 352KB - Virtual size: 356KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xxx Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xxx Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
xxx Size: 23KB - Virtual size: 24KB
IMAGE_SCN_MEM_READ