Static task
static1
Behavioral task
behavioral1
Sample
343d59f658202989631ea8d2b787a6b2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
343d59f658202989631ea8d2b787a6b2.exe
Resource
win10v2004-20231215-en
General
-
Target
343d59f658202989631ea8d2b787a6b2
-
Size
143KB
-
MD5
343d59f658202989631ea8d2b787a6b2
-
SHA1
f9e8600efdd658a63c28eeb229215fab1cf81f24
-
SHA256
df144338eb429577a6a7acaba6320d2b919f42cddaf6ad96f0ecb4382ccc405f
-
SHA512
8ea622330552d06e2510beda405edf12e4f58a9accd8eaf8461e25353d7cc8da0e3db5ad8e858ab2e35955c6a06d36041f756f7547f102a09b980f4c1ebfccc1
-
SSDEEP
3072:a2KCqeJp4mZFmWFg3xFu6zKAm9pnnzFcwLAH1:TKCPz5Z5qxA6zKAm9pnzFcwLAH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 343d59f658202989631ea8d2b787a6b2
Files
-
343d59f658202989631ea8d2b787a6b2.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ