Static task
static1
Behavioral task
behavioral1
Sample
3a8a3be6bfb60b2b9b2d02cc6ddf57e2ff0cb001b764df199026adc4e287ec4a.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
3a8a3be6bfb60b2b9b2d02cc6ddf57e2ff0cb001b764df199026adc4e287ec4a.exe
Resource
win10v2004-20231023-en
General
-
Target
3a8a3be6bfb60b2b9b2d02cc6ddf57e2ff0cb001b764df199026adc4e287ec4a.exe
-
Size
840KB
-
MD5
376a3dc05bfe42276458069cc4f94f9f
-
SHA1
f8aa05b336f47e781309675272df96053db152f1
-
SHA256
3a8a3be6bfb60b2b9b2d02cc6ddf57e2ff0cb001b764df199026adc4e287ec4a
-
SHA512
93cb36797f4095443edfdfb605f8122ff2c481f849e909e9142369deb66469095551d79589f039d3c77cf60a4931ddabf66247120f4afc2e25349606596c0f74
-
SSDEEP
12288:JD0ICaVWX5FQIoltjK0uchaqhCAEAL3zMM8ULpRReMadlkRcu5GN1x+5B/5pvGr:evQIUpTCaL3zMZULTReMawN5GTcrGr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a8a3be6bfb60b2b9b2d02cc6ddf57e2ff0cb001b764df199026adc4e287ec4a.exe
Files
-
3a8a3be6bfb60b2b9b2d02cc6ddf57e2ff0cb001b764df199026adc4e287ec4a.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 838KB - Virtual size: 837KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ