Static task
static1
Behavioral task
behavioral1
Sample
3ff47788079044538059129a861e32d6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ff47788079044538059129a861e32d6.exe
Resource
win10v2004-20231222-en
General
-
Target
3ff47788079044538059129a861e32d6
-
Size
182KB
-
MD5
3ff47788079044538059129a861e32d6
-
SHA1
e0032a8786c1fd7aa9701c71cd0da72db150ea51
-
SHA256
07aa705055016a75499b2cea2ce6359fbf17ca112f474f18677cafb2d84827f1
-
SHA512
0dba04120ea337afafff7efc45bea75c0732bbb3f8f96b7372f0d5888f0e5b3bbc8c39364b90b87825a772ab4a4e5424117c030604176293cf9372406dd7d6ff
-
SSDEEP
3072:QxkLKMROdrxJ6m0HskIDkSYeQw4NPrNpBS/zS5DYUlVPQNa2iMfaMdnOEsmcbyfP:QxkGTd/lkIYSXIrNjS29YUlqeMfROmc0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ff47788079044538059129a861e32d6
Files
-
3ff47788079044538059129a861e32d6.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ