Static task
static1
Behavioral task
behavioral1
Sample
3a81040d6b700d71502f0caf9963ca3d441f3b771e1077b9c0d193f5b805307a.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3a81040d6b700d71502f0caf9963ca3d441f3b771e1077b9c0d193f5b805307a.exe
Resource
win10v2004-20230915-en
General
-
Target
3a81040d6b700d71502f0caf9963ca3d441f3b771e1077b9c0d193f5b805307a
-
Size
3.4MB
-
MD5
a58fffd755d1b5f4a74cf1fa0794d2c1
-
SHA1
aadf404fff9cd503dec69c201bca54b31b5f50b4
-
SHA256
3a81040d6b700d71502f0caf9963ca3d441f3b771e1077b9c0d193f5b805307a
-
SHA512
66ad9aac340e2c072384c86815af579606fcd03679e580ed03d12abe7f15c6b53c03c6d3ac13dc4cfe007be6af39af7c7ac5f1c7e8925ee9739099db2bd8f99b
-
SSDEEP
49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlfhZyH0jjMtLv4QFsfQDxjlJ:c+8X9G3vP3AMJv6+sDPFltZJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a81040d6b700d71502f0caf9963ca3d441f3b771e1077b9c0d193f5b805307a
Files
-
3a81040d6b700d71502f0caf9963ca3d441f3b771e1077b9c0d193f5b805307a.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 994KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ