Static task
static1
Behavioral task
behavioral1
Sample
3e2a28bd5c30bbbd18c06d43bf0aacf0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e2a28bd5c30bbbd18c06d43bf0aacf0.exe
Resource
win10v2004-20231215-en
General
-
Target
3e2a28bd5c30bbbd18c06d43bf0aacf0
-
Size
861KB
-
MD5
3e2a28bd5c30bbbd18c06d43bf0aacf0
-
SHA1
575a725760a35cd739dfedf87bfb87f027a303a7
-
SHA256
6640eaf834dbad01ada7e3047cd2ffc2c344cca23ee6d5c0516e652459a5ff89
-
SHA512
f0141fca9f9152aa74c630b9aef9290936ff0b4ae0398027b915d74e7722d5f324a056e80d78b62fb99d38f9d133585879c5a4b341201a226f3a7b2028f37beb
-
SSDEEP
12288:Fu4l7zdZT9DuHYmO+Cfc62G3VtwTQPwTNvOglcqtutiFMBPTwiNMdDu9SacimHY6:Q4hzdZpUP0toQ2N57abKdtPimHX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e2a28bd5c30bbbd18c06d43bf0aacf0
Files
-
3e2a28bd5c30bbbd18c06d43bf0aacf0.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 316KB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uglzqhhh Size: 752KB - Virtual size: 752KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wtwrqlsj Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE