Static task
static1
Behavioral task
behavioral1
Sample
3887e918f1c11f3b99c16944ac80efce0e39daaff033d928f2dff47a6ff6c83f.exe
Resource
win7-20231023-en
General
-
Target
3887e918f1c11f3b99c16944ac80efce0e39daaff033d928f2dff47a6ff6c83f
-
Size
541KB
-
MD5
7d5c791c97d2427f9de7a59c66b24b3c
-
SHA1
d3f9c2933be4d86af238dae9c5f5f651a6bdcb47
-
SHA256
3887e918f1c11f3b99c16944ac80efce0e39daaff033d928f2dff47a6ff6c83f
-
SHA512
67462fd8eb6c772be6a5f98e03f8b63035f4dade3198d497f0c2a24d52d46767c229db005e79ffb6288e095404cacb3e285ed9d2e509ceadc16fb0340cfce4bc
-
SSDEEP
12288:LL+dH2wVJyegu0tY/NR+Mu7xbUZLB+Sg5bfOGjieZXgsG:LL+dH2MS1yLu11SGvZi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3887e918f1c11f3b99c16944ac80efce0e39daaff033d928f2dff47a6ff6c83f
Files
-
3887e918f1c11f3b99c16944ac80efce0e39daaff033d928f2dff47a6ff6c83f.exe windows:6 windows x64 arch:x64
79b3362178937bf9559741c46bb9e035
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
Sections
.MPRESS1 Size: 379KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE