Static task
static1
Behavioral task
behavioral1
Sample
3926b3a333309f14daa739307765e03a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3926b3a333309f14daa739307765e03a.exe
Resource
win10v2004-20231215-en
General
-
Target
3926b3a333309f14daa739307765e03a
-
Size
2.6MB
-
MD5
3926b3a333309f14daa739307765e03a
-
SHA1
8050ec8e9f18faa81977c4f207580e27acdd33cf
-
SHA256
dd08f496c956ea590b7787b13c95b8c1df35b583cdbc9331816cbdb6c7202d79
-
SHA512
1c363496df9c6f49157f0b3d2c6891df0a99827d495076c8756a8cf6fc081d2a9b0424ed4f181bb2cbceb97f5ca0fe078945c1c3bbc053db647bb807fb7b2187
-
SSDEEP
49152:0S5+0ntZTh9wWDKThc73t2tgJTXo8w3YSTYPy0U+2TaTZzwCKeFj:O0XTh9wWWhcp2tgBJw3lwyYJwCKe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3926b3a333309f14daa739307765e03a
Files
-
3926b3a333309f14daa739307765e03a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
�ƽ����� Size: 356KB - Virtual size: 356KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�ƽ����� Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�ƽ����� Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
�ƽ����� Size: 96KB - Virtual size: 96KB
IMAGE_SCN_MEM_READ