Static task
static1
Behavioral task
behavioral1
Sample
003430042e9d02e686170590ae1cb365.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
003430042e9d02e686170590ae1cb365.exe
Resource
win10v2004-20231215-en
General
-
Target
003430042e9d02e686170590ae1cb365
-
Size
698KB
-
MD5
003430042e9d02e686170590ae1cb365
-
SHA1
59bd3bde23948bfc0ed8cf638ca21b606b76b277
-
SHA256
3376d35b293634fafc53dd3ba9e7152b9e59a6e1ebcf6aa86aa9594ae56f79f7
-
SHA512
b82e2869dcc0c1a99ebe0bf234f24cb3821e8237275087bf5e0a6598202d28073cd8eb6a63d21fc14582607411c3f98159355627f28f4ee89324995d1fc63797
-
SSDEEP
12288:KqpDpKD3QH5pwMwktr5NE+yHko71f6hIehY876GMNlUjk6BeMXEvI57oZrjwsKBE:l5UbEtrHgH31GI67WB6cM0v4UdjABMJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 003430042e9d02e686170590ae1cb365
Files
-
003430042e9d02e686170590ae1cb365.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 81KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 108KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 298KB - Virtual size: 494KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 950B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ