Static task
static1
Behavioral task
behavioral1
Sample
34ebd94aa5a84a7282099e5a62c82dd3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
34ebd94aa5a84a7282099e5a62c82dd3.exe
Resource
win10v2004-20231215-en
General
-
Target
34ebd94aa5a84a7282099e5a62c82dd3
-
Size
305KB
-
MD5
34ebd94aa5a84a7282099e5a62c82dd3
-
SHA1
9a362b4f84789a8bb48cd53450df1c6f068a5570
-
SHA256
ddc59a971de122cf567a048cb3ce073b2dd1b8be5ecf1f42e2ed840c1b88d605
-
SHA512
29056f8ffc2123c7601c1b6c0cd3d7f87353edaed02b247d4a08d524447c5ce1bea013a537e68a8ae252dbcd8fa431a756e0f738e7f46660b8a7c98f53263f79
-
SSDEEP
3072:QZNQieDcexMs/zhDv2URro4RXsWwMF8ChmJfV8PgjOQfhScP4HyfS4B8Df88IJ5r:v8eq4zKJJXXP4HyfMfo8jryMUWP4lc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34ebd94aa5a84a7282099e5a62c82dd3
Files
-
34ebd94aa5a84a7282099e5a62c82dd3.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 258KB - Virtual size: 257KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ