Static task
static1
Behavioral task
behavioral1
Sample
3f49765944cb1a793c6f28455ef25444.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3f49765944cb1a793c6f28455ef25444.exe
Resource
win10v2004-20231215-en
General
-
Target
3f49765944cb1a793c6f28455ef25444
-
Size
159KB
-
MD5
3f49765944cb1a793c6f28455ef25444
-
SHA1
eef32f5969f2b8ac32095f1baea8ec65b29ea2ea
-
SHA256
dd2620544ef38e96b8dd1b0e15bec6a32184c48a4b555a9bcb5b2d68f1f9790c
-
SHA512
a95cfb19afabadb4ef5ebfe77494d1ef5a6933616ca5f3e4883a13694b03055b70f9a5bd124184b6502159ae2bacaf44c7bb7f63ded884aa3986b4fb02c2c0b6
-
SSDEEP
3072:+cKrBuHAMhbG4PnxECUSWQkWhERU3+vDZmAexrIl1H1EjbwGiV6wgII3Y:5GB0ZzxkugsJAexrIHH1McGiV6it
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f49765944cb1a793c6f28455ef25444
Files
-
3f49765944cb1a793c6f28455ef25444.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 517KB - Virtual size: 864KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mpt34m Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE