Static task
static1
Behavioral task
behavioral1
Sample
3e279f63802c4251815358e438e39e255f461f42251ebf06c3c6be60f988d74f.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3e279f63802c4251815358e438e39e255f461f42251ebf06c3c6be60f988d74f.exe
Resource
win10v2004-20230915-en
General
-
Target
3e279f63802c4251815358e438e39e255f461f42251ebf06c3c6be60f988d74f
-
Size
714KB
-
MD5
5bb1eac48ddc8eb4c1625e4b3f86de6c
-
SHA1
eb5431de73fe3146b872ff7706461a747f5a1b4a
-
SHA256
3e279f63802c4251815358e438e39e255f461f42251ebf06c3c6be60f988d74f
-
SHA512
165378dfe1fdadd25f25f468007d1f78d3dabb7e205a058eb4d9a0afcb35c6389bc9a9dcba34f8429d4aa29c94af8743423ed2bbd0fbde0c3b44b740b93d4761
-
SSDEEP
12288:KSTGBXU4yQs9W/yh2sMQABKTtLZrA4t6sFi5qqrmaKVzJyNWI5lCZL5KDu4i8+W0:PoHyQsg/yEXuJntFiIqrPS1yNWI/CFrR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e279f63802c4251815358e438e39e255f461f42251ebf06c3c6be60f988d74f
Files
-
3e279f63802c4251815358e438e39e255f461f42251ebf06c3c6be60f988d74f.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.t13 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s2m Size: 690KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dvv8 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE