Static task
static1
Behavioral task
behavioral1
Sample
3709909c1eaa3706e815cfc9f998b149.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3709909c1eaa3706e815cfc9f998b149.exe
Resource
win10v2004-20231215-en
General
-
Target
3709909c1eaa3706e815cfc9f998b149
-
Size
138KB
-
MD5
3709909c1eaa3706e815cfc9f998b149
-
SHA1
9b4c3e6593a2045064fd182d9f2cd2d7a717e9b1
-
SHA256
e91dbb2d0b611558b5c65bd1535c6b47ca80a487e6113d2349a42dded2414376
-
SHA512
31d1419b7c3acd51aa90f0f9d9d01d1748b100bc1eee75627fd04ac003f40e8cd9df4fb7fb40143c73e182522f42327ed57cfc19a693dafaa93058b7f8a8f626
-
SSDEEP
3072:CRlwxw3vVnd8K2tTV/GHhw08wXoH6oHKtBo0/VskAo/9koFlH5c7:rwVnKKgKz8w4H6AKtB1ato/9HFXc7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3709909c1eaa3706e815cfc9f998b149
Files
-
3709909c1eaa3706e815cfc9f998b149.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
unpacked Size: 554KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
unpacked Size: 253KB - Virtual size: 924KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
unpacked Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.snaker Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE