Static task
static1
Behavioral task
behavioral1
Sample
3bb518e5ab8a82ed160206ab7bfbf822.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3bb518e5ab8a82ed160206ab7bfbf822.exe
Resource
win10v2004-20231215-en
General
-
Target
3bb518e5ab8a82ed160206ab7bfbf822
-
Size
98KB
-
MD5
3bb518e5ab8a82ed160206ab7bfbf822
-
SHA1
c30781ead2bf6bc92a2e3098477b87de0c965664
-
SHA256
9f8e8ebb85516df743d2129957f14e15292d6df9c5d34bb42bd4d38547d95e12
-
SHA512
a4edf5d7a4da6be60005ad17a683f1957f21e9ac8262e710c9517ff531e8812c3471c9278e14e0e6dcba9e952cdd186e43ecd013f62ee7aaa752bc9463c63901
-
SSDEEP
1536:qkW2LPXypZTydJmKbLvoQrM7CCHbk8xzOIEYTY2HCEp5cfa2+YC:qQa6dJmKfo79jOLY82VcSD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bb518e5ab8a82ed160206ab7bfbf822
Files
-
3bb518e5ab8a82ed160206ab7bfbf822.exe windows:4 windows x86 arch:x86
fdbfec85672f73d2a4d49635454936d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
user32
MessageBoxA
Sections
.text Size: 1KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 295B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 886B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 855B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 1KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ