Static task
static1
Behavioral task
behavioral1
Sample
3b5f190888a76fe53aaa0d42fd14ddad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3b5f190888a76fe53aaa0d42fd14ddad.exe
Resource
win10v2004-20231215-en
General
-
Target
3b5f190888a76fe53aaa0d42fd14ddad
-
Size
340KB
-
MD5
3b5f190888a76fe53aaa0d42fd14ddad
-
SHA1
247f6a4f518e69a0070fc7c5340f9fb0cb364efa
-
SHA256
e821c9b643791d8b99134bb59b01975097a0fac39dfb0cf442a1de9905b80962
-
SHA512
cf53e6a599669a847dbe6ba099950e8b1d3198b40ffb60c863269c64dd6edf2948966586e403cc5ba4da9d9ab9a09209ae693326a77b6fee8d24da8e0c57c60f
-
SSDEEP
6144:K6Y3Relii9JbpLYJfIBRPew6H79tk9j11ednVh05JSCvIbBTq/T6WG4dhU:K3elD9JFcJfcRex9G1AVyLmg/TjdhU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b5f190888a76fe53aaa0d42fd14ddad
Files
-
3b5f190888a76fe53aaa0d42fd14ddad.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 200KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE