Static task
static1
Behavioral task
behavioral1
Sample
3397d34c3aa5f1fef9e017adc4fac1f993351ad779650bd191184e44ad37de85.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3397d34c3aa5f1fef9e017adc4fac1f993351ad779650bd191184e44ad37de85.exe
Resource
win10v2004-20230915-en
General
-
Target
3397d34c3aa5f1fef9e017adc4fac1f993351ad779650bd191184e44ad37de85
-
Size
45KB
-
MD5
95c46ac5264344b7ec50a5cb4e6f441a
-
SHA1
bc9766cb42b7f50525f7ccc40bb9bac7f4cecb50
-
SHA256
3397d34c3aa5f1fef9e017adc4fac1f993351ad779650bd191184e44ad37de85
-
SHA512
b8e58618bb90d777f65342a4c66af68e9518760ef84444a80f9f0f6d2fe7d8de1d52a8ad4127a1c724e374e4d5995eb668fa1f498f3c983812321c82d80781dc
-
SSDEEP
768:dg62zCbHSqJ8l5ESTCFfJmOZo3MGvHGdvvQXD8P:r2Gbw5ESTwJmOK3vHqvQT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3397d34c3aa5f1fef9e017adc4fac1f993351ad779650bd191184e44ad37de85
Files
-
3397d34c3aa5f1fef9e017adc4fac1f993351ad779650bd191184e44ad37de85.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.123s0 Size: - Virtual size: 612KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.123s1 Size: - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
12saq Size: 383KB - Virtual size: 384KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
12saq Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
12saq Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ