Static task
static1
Behavioral task
behavioral1
Sample
3ba94dcc9ff97295eda7ff7db1b3ca1f.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
3ba94dcc9ff97295eda7ff7db1b3ca1f.exe
Resource
win10v2004-20231215-en
General
-
Target
3ba94dcc9ff97295eda7ff7db1b3ca1f
-
Size
97KB
-
MD5
3ba94dcc9ff97295eda7ff7db1b3ca1f
-
SHA1
52f718ce84e8339ce3fc435862fe4b3dd0eeca5d
-
SHA256
11bc385ea3cd98d85ab8271d517154296d348a43e399ee3c0afd5bd166631190
-
SHA512
ad62e89316d28a55a97f83da71b018efc49de61e68b585b19f020db14fa4cbfbb88bc1ab48095909db929e863f4f3fb23da9088db004964ec2eacc860ed306ca
-
SSDEEP
1536:5vHMoORizUPliPsm/gL16ZpQGh6MgHN+PhuLGR/11TvvMoOJ:RHxOMUMPsgQvTMY+PhGGR/11TvxOJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ba94dcc9ff97295eda7ff7db1b3ca1f
Files
-
3ba94dcc9ff97295eda7ff7db1b3ca1f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
gege Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
gege Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
gege Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ