Static task
static1
Behavioral task
behavioral1
Sample
3fb8cdcc7dd8d85acbdaee0859d56935.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3fb8cdcc7dd8d85acbdaee0859d56935.exe
Resource
win10v2004-20231215-en
General
-
Target
3fb8cdcc7dd8d85acbdaee0859d56935
-
Size
393KB
-
MD5
3fb8cdcc7dd8d85acbdaee0859d56935
-
SHA1
37bea46c119217cac459666aa657ebd0bf48b631
-
SHA256
050d54a726048ed6ab5d631e0b0eff91d6e47b027e44305589221fad6eef641d
-
SHA512
bc30a77ea1cb20bbb2468de5e30c91e882e8d4884e32e6f72d3e887290d8e8c2f7af894ddd58396083650d1f2200f25133c7e7f26b91332f866b3e7266537194
-
SSDEEP
6144:X/26kJC3oghja3DpYGaYxKrNV0eS08eMQTtiawP0oB7a9yuWT3VoaaRDAs0QDktA:eC4gNobaYoN2eS0ZZQfJdzTORDj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fb8cdcc7dd8d85acbdaee0859d56935
Files
-
3fb8cdcc7dd8d85acbdaee0859d56935.exe .vbs windows:5 windows x86 arch:x86 polyglot
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 398KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pmj Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE