Static task
static1
Behavioral task
behavioral1
Sample
3b6ffce381c9220247fd7f5a6d3b6b18.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3b6ffce381c9220247fd7f5a6d3b6b18.exe
Resource
win10v2004-20231215-en
General
-
Target
3b6ffce381c9220247fd7f5a6d3b6b18
-
Size
304KB
-
MD5
3b6ffce381c9220247fd7f5a6d3b6b18
-
SHA1
7126c0199d2f506878447beba707ee266ff4036f
-
SHA256
75e7fc66a1719f61bbb7985d00af92df9eda650892c47e3b11f976a1477ceee6
-
SHA512
ebc02516a1a603ecaf8212a9741da919392ca1c2a7b7a127ab4e354f7e6521de37e73124432fdf01c21166be478a90343597d49963fa50a6cd08aa250abc1780
-
SSDEEP
6144:D45RDghZCaW4oyIiHJK7RCLVtNgesLKD9OY1QZr82jdPBcw2aF:D45R07CVoGqVfg1LWOY1uBcw2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b6ffce381c9220247fd7f5a6d3b6b18
Files
-
3b6ffce381c9220247fd7f5a6d3b6b18.exe windows:1 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
1040408 Size: 267KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8249027 Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7518614 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1436286 Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9298273 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3778105 Size: 512B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6156928 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE