Static task
static1
Behavioral task
behavioral1
Sample
3d6f6332f28a62425b06f74ff7dae5b3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3d6f6332f28a62425b06f74ff7dae5b3.exe
Resource
win10v2004-20231222-en
General
-
Target
3d6f6332f28a62425b06f74ff7dae5b3
-
Size
856KB
-
MD5
3d6f6332f28a62425b06f74ff7dae5b3
-
SHA1
2c553cc6d79e98c76c54516f9de57d02c4dfe89e
-
SHA256
f0ee1ad3f9ea7129acc49a1c68b4091f358ed77d31fd467aba077704ead6a1a2
-
SHA512
560189e0152ae7208f0ca51335e60c73ccfb1a661a24df18a5da531c19dc5fd89af9c5dfc1cfe88f72817b40917a7d63b19dbf606e7046b7699bbf032e498de1
-
SSDEEP
24576:ceSxgNi2kUX+rbfoeA2w/JhdbfPq3rO6vjJTfpy:ceJQY+rkeT6dbPq3rOAj1g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d6f6332f28a62425b06f74ff7dae5b3
Files
-
3d6f6332f28a62425b06f74ff7dae5b3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ