Static task
static1
Behavioral task
behavioral1
Sample
3f2ff9263d86106f654a0c0abb7c75f88699a6eb07506d4c74e661527003f393.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
3f2ff9263d86106f654a0c0abb7c75f88699a6eb07506d4c74e661527003f393.exe
Resource
win10v2004-20231020-en
General
-
Target
3f2ff9263d86106f654a0c0abb7c75f88699a6eb07506d4c74e661527003f393
-
Size
2.7MB
-
MD5
bd47431ace88c6cd59e2145b3a9fe042
-
SHA1
d84efd99a67d35a1b0d4e13e2fe3ff516c8186d9
-
SHA256
3f2ff9263d86106f654a0c0abb7c75f88699a6eb07506d4c74e661527003f393
-
SHA512
2127d2dd51168fc3096f7e649d3eafd41b423a5302cd71e1075b01a80ef6178ad5e7a614fcd959898e369036bcf5cc8643161ebde98fbdc4f4364a10dd9527f9
-
SSDEEP
49152:8aM+780hIOVYuZR6qgpFOgBG5gSQxr+UiawmZE4wQIsDi6V:m+78AIOVYoRboOgwPNawgtwQj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f2ff9263d86106f654a0c0abb7c75f88699a6eb07506d4c74e661527003f393
Files
-
3f2ff9263d86106f654a0c0abb7c75f88699a6eb07506d4c74e661527003f393.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2.1MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 28KB - Virtual size: 28KB
IMAGE_SCN_MEM_READ