Static task
static1
Behavioral task
behavioral1
Sample
36329ccf9c64fcff59b9aa42a140d0a0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
36329ccf9c64fcff59b9aa42a140d0a0.exe
Resource
win10v2004-20231215-en
General
-
Target
36329ccf9c64fcff59b9aa42a140d0a0
-
Size
212KB
-
MD5
36329ccf9c64fcff59b9aa42a140d0a0
-
SHA1
181429b899c6cb01e5cde9f2136cfaa8ea94c245
-
SHA256
ed24c6852c7ac3eaeb823a1d25f2e06f8d39e202dfca757d6efdf25e66133416
-
SHA512
a2e301aab917b7b4aa1c7623025c3c70cef09dfd06ebb2553fdd65351954833f0ef7636e9d4303b48f58d00370557c6061555ebab74ca20c7cb768d5cc385c38
-
SSDEEP
6144:/mHUaxNuoLcFCBWGSOzxgKlm/AZKQ4rE5ZR:/m0sudFCs0xnmIZKQ4rE5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36329ccf9c64fcff59b9aa42a140d0a0
Files
-
36329ccf9c64fcff59b9aa42a140d0a0.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ