Static task
static1
Behavioral task
behavioral1
Sample
343f4b250f3d6fe2d77a706ef22ed16f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
343f4b250f3d6fe2d77a706ef22ed16f.exe
Resource
win10v2004-20231215-en
General
-
Target
343f4b250f3d6fe2d77a706ef22ed16f
-
Size
2.2MB
-
MD5
343f4b250f3d6fe2d77a706ef22ed16f
-
SHA1
e52d326876d4cd110f1c9403a593d0741df7cb17
-
SHA256
ad31e41a33ff35909e4957671babeb724da92b9ae6d8311d7f1fbea6392a776f
-
SHA512
f9cf9ebf2c6b5bc8246b41e4aa248e6acd628e22e96d039d99700d0007ae3aee95b19420b8a47f84773699de15dd28e9cf6dfb87fe9b26f08eceec38a0980b98
-
SSDEEP
24576:fvtWpqw6f6FaRAmWDGxp03gZqM9NU1KWGljRRuFhp/QER6obSqRbpO+5NHJ:hw6iaRAmWSxmz2NU1KWu1AZQEIoHp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 343f4b250f3d6fe2d77a706ef22ed16f
Files
-
343f4b250f3d6fe2d77a706ef22ed16f.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 748KB - Virtual size: 747KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 731KB - Virtual size: 730KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 86KB - Virtual size: 378KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 281B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 131KB - Virtual size: 131KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/32 Size: 26KB - Virtual size: 25KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/46 Size: 512B - Virtual size: 48B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/65 Size: 222KB - Virtual size: 222KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/78 Size: 116KB - Virtual size: 115KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/90 Size: 45KB - Virtual size: 44KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.symtab Size: 101KB - Virtual size: 101KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ