Static task
static1
Behavioral task
behavioral1
Sample
3dc941e16fa811b0a6dbf4695d19077a92885568d49be5e623d55762c2343b6f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3dc941e16fa811b0a6dbf4695d19077a92885568d49be5e623d55762c2343b6f.exe
Resource
win10v2004-20231127-en
General
-
Target
3dc941e16fa811b0a6dbf4695d19077a92885568d49be5e623d55762c2343b6f
-
Size
1.3MB
-
MD5
c6aecc0e4d3db5d4e736eeeadb0b973c
-
SHA1
71fe414f85aca7cc91794e9a73af124ab05ea2b4
-
SHA256
3dc941e16fa811b0a6dbf4695d19077a92885568d49be5e623d55762c2343b6f
-
SHA512
1571556ffeb44821ea1797ad0c404c39f7acea0119054e67a66fe4609b7fd66bf203f9c6157740119f4e35a3604fd0b4c336d3a55629e047953c5d744af1062d
-
SSDEEP
12288:LcxnAA8HyJ4pyUsjthkZ5pxXt3978OiVbkqttKm9lgxGKJF8rdgqiMShXCz+FRHx:LmAfWhK/LrEYKt9Y5FT0z+bdCj1q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dc941e16fa811b0a6dbf4695d19077a92885568d49be5e623d55762c2343b6f
Files
-
3dc941e16fa811b0a6dbf4695d19077a92885568d49be5e623d55762c2343b6f.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ