Static task
static1
Behavioral task
behavioral1
Sample
11d3adb4d9dea5443b3ef2cc2d3ad316.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11d3adb4d9dea5443b3ef2cc2d3ad316.exe
Resource
win10v2004-20231215-en
General
-
Target
11d3adb4d9dea5443b3ef2cc2d3ad316
-
Size
2.5MB
-
MD5
11d3adb4d9dea5443b3ef2cc2d3ad316
-
SHA1
efd532f5cdb882677c27f13d9ada85f021b63453
-
SHA256
5f105a7013f29fcc6d7638d78b161669e53e0f4cc10a30b7bd925b23c7945d64
-
SHA512
4bdb24464b501d45fedec46739fbd705fd115891b751e138e1a80f8b62f2dc04575bae2b46f1605216b623373d0d9f97f85d6b8122fbd302f33b1612a269ddc0
-
SSDEEP
49152:B7P6tqaVgctOZWGWAP66/XgVt5SWAAL9y8xoZ2W3y9WQbNsikSZaLL2/UhQ+q:B7PWVlOZPvtWPLNa2W3BQbmUDF+q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11d3adb4d9dea5443b3ef2cc2d3ad316 -
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_1
Files
-
11d3adb4d9dea5443b3ef2cc2d3ad316.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ