Static task
static1
Behavioral task
behavioral1
Sample
335ea6993c70bf1e48577674a8a8b03c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
335ea6993c70bf1e48577674a8a8b03c.exe
Resource
win10v2004-20231215-en
General
-
Target
335ea6993c70bf1e48577674a8a8b03c
-
Size
3.4MB
-
MD5
335ea6993c70bf1e48577674a8a8b03c
-
SHA1
ca0903a8afa31f4b7910f68630611db80eece0b2
-
SHA256
780485a6930a870918c49604d1e6cd128d0c9c48dced6f12e693d1fbd41aabf1
-
SHA512
19d80594cfa006d5b68ac5f6a5efbd89943f7ec278939ec9fa3c362da420d5db19630911bf4a35bcfc861c33e5acb38649289c28e683a17ab1517b9c2837c79b
-
SSDEEP
49152:Vp+BXFP/zeN3mTjc2TMB6/uiDO8u32HOB1aubvVgrmVkJ7vE5ePrVFeJ7OEI2+hg:MXFemE2k3ttumVtC2j9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 335ea6993c70bf1e48577674a8a8b03c
Files
-
335ea6993c70bf1e48577674a8a8b03c.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 297KB - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEPack Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xpr01 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 992KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jtxsgaym Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiduoxks Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE