Static task
static1
Behavioral task
behavioral1
Sample
3fba6c7709d3821ea1ae8bea05ea7e8d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3fba6c7709d3821ea1ae8bea05ea7e8d.exe
Resource
win10v2004-20231215-en
General
-
Target
3fba6c7709d3821ea1ae8bea05ea7e8d
-
Size
1.1MB
-
MD5
3fba6c7709d3821ea1ae8bea05ea7e8d
-
SHA1
0fd4feb670dc95829ede32b63ab2e6f8f06ae913
-
SHA256
55d16ec3eee3c5fbc86bfd9c23b4d8bf6d38278e4f74b4d660c5286209712a02
-
SHA512
c682f6cb9afccf693d9e3ee418aedba8073c0287ccfd4e1a65e2b9f028a06e39c4e7ca8e97d89105088aad7ec707ef5ea272948141e605224c6d727decdc888f
-
SSDEEP
24576:fLhe+vi6lp55fmaYU3/FaC0yAs46fWWUiZ6x+ye6l7yTRtwRs:1vi6lj5fXYU3/FaC/vOWFUk9twC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fba6c7709d3821ea1ae8bea05ea7e8d
Files
-
3fba6c7709d3821ea1ae8bea05ea7e8d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 920KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 130KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE