Static task
static1
Behavioral task
behavioral1
Sample
3b9617f561c549d43ee612b00c635ab1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3b9617f561c549d43ee612b00c635ab1.exe
Resource
win10v2004-20231215-en
General
-
Target
3b9617f561c549d43ee612b00c635ab1
-
Size
229KB
-
MD5
3b9617f561c549d43ee612b00c635ab1
-
SHA1
1b2cc5c3a3694e1600a0c358df605d0c24047b3e
-
SHA256
bddf24d7ae594e5398077966c512aa4b68722063cc0735d0d3a4900eabe010ab
-
SHA512
4e819a3b66ea94b2ba3464a2f32d9394c45f35c416bce8e6f60d290d4b35c85489a8782d06409635648c8d650fcb16139f93c8918431ac457122f284c1ac8bd3
-
SSDEEP
6144:FcNkgTq4uXFFcz1c6afbkXV1tnN8MZZ2LuryV:FcNkgTq42cBPafbGV1xKV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b9617f561c549d43ee612b00c635ab1
Files
-
3b9617f561c549d43ee612b00c635ab1.exe windows:4 windows x86 arch:x86
2f3c5da38e687ed8e68cd2b55dbd54f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 227KB - Virtual size: 227KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE