Static task
static1
Behavioral task
behavioral1
Sample
3fafa7946ff069ba4ac5afe53c469226.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3fafa7946ff069ba4ac5afe53c469226.exe
Resource
win10v2004-20231201-en
General
-
Target
3fafa7946ff069ba4ac5afe53c469226
-
Size
1.1MB
-
MD5
3fafa7946ff069ba4ac5afe53c469226
-
SHA1
c5be86b7a0853f9b25bd9b21f9199a04bbd53bef
-
SHA256
b0565d9c2fc05571a4d9961c3c04323e3a431e3e98924d351dc07cbfc96b3fe6
-
SHA512
1e4bdb1a94b91ae059f43397d933ba81437b879d4a11607dddb45a1b368fea031fcfae5cb5927c12f3d3292129df0ed0e1348baddee196455dddb7c54fecab56
-
SSDEEP
24576:6ArW/8hh0FQAq7c8nA7YMv3+DpBNPRI9ovlG4XozaEhptdPYfCG6bYVxXNVD8pVP:6e0mfW3YNPRRlG4saIprQNi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fafa7946ff069ba4ac5afe53c469226
Files
-
3fafa7946ff069ba4ac5afe53c469226.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 860KB - Virtual size: 858KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ