Static task
static1
Behavioral task
behavioral1
Sample
3709fc032bc524e4acf5ec8e6804749c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3709fc032bc524e4acf5ec8e6804749c.exe
Resource
win10v2004-20231215-en
General
-
Target
3709fc032bc524e4acf5ec8e6804749c
-
Size
144KB
-
MD5
3709fc032bc524e4acf5ec8e6804749c
-
SHA1
2941d03bed7f5bbf42fcba87c1faa06cd1cd87a7
-
SHA256
16429ed81907d990c1d1863e29a9a702d8413bb5b281d6decf420e3e1adcde88
-
SHA512
33da4422df1c98d62a95dc20c0bdc9282ee832df75207441a37997e0f1b79df8ead778189f8ac029c50f0eb3aa7d37d379d2bb84743eafa4e29bca0527548c93
-
SSDEEP
768:+tI1gZAEl/L4jKZru9iwvVJDiSQD1UoyNsAcsqCZpLRD39r9pNYR:oI1bEh8gi3mD1UgsqMZRD39r9pNY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3709fc032bc524e4acf5ec8e6804749c
Files
-
3709fc032bc524e4acf5ec8e6804749c.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ