Static task
static1
Behavioral task
behavioral1
Sample
36485275a18d0dc8d9e80c617a161662.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
36485275a18d0dc8d9e80c617a161662.exe
Resource
win10v2004-20231215-en
General
-
Target
36485275a18d0dc8d9e80c617a161662
-
Size
278KB
-
MD5
36485275a18d0dc8d9e80c617a161662
-
SHA1
0b523dc6cca157d747608d996b5af01bbecf5196
-
SHA256
221a298ee63c8aca6b160d97fed711289172fad568163f61c6001c1e5417d53c
-
SHA512
cece32681c8401935843c8cee919a45384378bb3447ae22e9e450194db0ff38f943acec9b8a55d35b70045d7201cdbf71f59050a2a7a7411b6d5783941371c98
-
SSDEEP
6144:WLPD7geEFjD4RCHsMBZshTgd1SAWHuK30o84NeWG5:YP/geEFjcRC52UL7HS0o8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36485275a18d0dc8d9e80c617a161662
Files
-
36485275a18d0dc8d9e80c617a161662.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
SaekqpGR Size: - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1kDwtgtd Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
hgHCPDMr Size: 267KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CmjoRzUO Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pIyx4ats Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ