Static task
static1
Behavioral task
behavioral1
Sample
3108d0ff19074a533d684078113b0a25.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3108d0ff19074a533d684078113b0a25.exe
Resource
win10v2004-20231215-en
General
-
Target
3108d0ff19074a533d684078113b0a25
-
Size
2.2MB
-
MD5
3108d0ff19074a533d684078113b0a25
-
SHA1
1c0420b55f67e06c55c156855dec4a1990b279f6
-
SHA256
f06997cee5b2112ee7e097b3c0f65334721ba937140cc53420f55de77c7007dc
-
SHA512
2e31303238ebe90cba273a84775f8da9c6a53bcbb006faa44474b5c63128502b997cd52e1424de6a9300a5eb76c70969bc870ff088a0138e5ca0ceae95b06914
-
SSDEEP
49152:OMp84LoYo1FpLJq/eyHkpje8HM8rSQOjpkDyRcMnS0dS:OMp82cFPfyQje8HBrSrrVd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3108d0ff19074a533d684078113b0a25
Files
-
3108d0ff19074a533d684078113b0a25.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
@,O43Y Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ