Static task
static1
Behavioral task
behavioral1
Sample
36852ca1166b2711f31c809405b66432246ab7da7517b174f6bbc10ce8128cd5.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
36852ca1166b2711f31c809405b66432246ab7da7517b174f6bbc10ce8128cd5.exe
Resource
win10v2004-20230915-en
General
-
Target
36852ca1166b2711f31c809405b66432246ab7da7517b174f6bbc10ce8128cd5
-
Size
193KB
-
MD5
d02ee4cdc5eeeb482881cae026888269
-
SHA1
a93682af66fa8f575f2bf75a3bc64b386dc1ddd2
-
SHA256
36852ca1166b2711f31c809405b66432246ab7da7517b174f6bbc10ce8128cd5
-
SHA512
7900a83dbf880554921aa0d56575726546e8732408467de386d93632a8fa5f19a08c4daa790729fc58399a71d35b1812d1abc0a2b4eb96d11ef18aaaa08c5a73
-
SSDEEP
3072:fP5gvNVLIfHQja1RfmLQADwSKkhU+tLgT5lODbiC8r1PkT:X2vnSwjaOcADw9cUeCOf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36852ca1166b2711f31c809405b66432246ab7da7517b174f6bbc10ce8128cd5
Files
-
36852ca1166b2711f31c809405b66432246ab7da7517b174f6bbc10ce8128cd5.exe windows:0 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 143KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fsp Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mmym520 Size: 29B - Virtual size: 29B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ