Static task
static1
Behavioral task
behavioral1
Sample
3949bec4816ddc4f9f0e1f676f72e5080436bd25ef1deed355322fc818712cbeexe.exe
Resource
win7-20231130-en
Behavioral task
behavioral2
Sample
3949bec4816ddc4f9f0e1f676f72e5080436bd25ef1deed355322fc818712cbeexe.exe
Resource
win10v2004-20231130-en
General
-
Target
3949bec4816ddc4f9f0e1f676f72e5080436bd25ef1deed355322fc818712cbeexe.exe
-
Size
508KB
-
MD5
dd348013f6383e0edd8eaa771003699d
-
SHA1
c7ddd7c9587d700519c205ce54d48261e89c4019
-
SHA256
3949bec4816ddc4f9f0e1f676f72e5080436bd25ef1deed355322fc818712cbe
-
SHA512
8c72328c3a7cd1ebf691e4608da812979e59e49b1d00f0986d003658e1f84371f92b16714495c1cc0eeccc7e657497f0a3b83a0092bdaf708ed88c09da3f4c16
-
SSDEEP
6144:jSgxZkvqveZV/kQlIrGVq79emWCLWcyqxmxcrwK/t:1MZVcQKGIUmDTrge/t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3949bec4816ddc4f9f0e1f676f72e5080436bd25ef1deed355322fc818712cbeexe.exe
Files
-
3949bec4816ddc4f9f0e1f676f72e5080436bd25ef1deed355322fc818712cbeexe.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 340KB - Virtual size: 339KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 167KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ