Static task
static1
Behavioral task
behavioral1
Sample
3067b1c5790905e3d7e9c18e41d1d7a1.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
3067b1c5790905e3d7e9c18e41d1d7a1.exe
Resource
win10v2004-20231201-en
General
-
Target
3067b1c5790905e3d7e9c18e41d1d7a1
-
Size
2.6MB
-
MD5
3067b1c5790905e3d7e9c18e41d1d7a1
-
SHA1
f4af4d437bac595933f68cda24c165633275ca6d
-
SHA256
8a77254478dabfde11cf5e194a48d554ea3aee6e14edb4e3cccb1d51b0844469
-
SHA512
e00c1dc1edf234786903d685322f0363cb9708c97364fc1bcc724bbee80c8587aee92fd5be301b9160bb2a73ae5b746464a87d860df9bc680ee1e970f1c05534
-
SSDEEP
49152:SegiFHueNegiFHRXJdWdYw6VdNRIky/Cr70QiDlYvoGxUSJpXUc9IW1dXgfC/MHt:UiFdiFxXJdWGw6VdIky/Cr4QEsRXUc9S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3067b1c5790905e3d7e9c18e41d1d7a1
Files
-
3067b1c5790905e3d7e9c18e41d1d7a1.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ