Static task
static1
Behavioral task
behavioral1
Sample
3b22534de2969f2899aa7ccfbc72809c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3b22534de2969f2899aa7ccfbc72809c.exe
Resource
win10v2004-20231215-en
General
-
Target
3b22534de2969f2899aa7ccfbc72809c
-
Size
24KB
-
MD5
3b22534de2969f2899aa7ccfbc72809c
-
SHA1
79b3221ba86d9711a490f9fcf1fed45347c92476
-
SHA256
413cc3c8d71580d191b06a0147b23816faf77b237700ab5e8587e3e4514425cb
-
SHA512
97545b7c65869f03e506234f15a7846db18646c80b44fdddde262fd9e6a82e311f0502fa5c611c88bb6b57f95edd76f017ff4ec7ef7aee7d734bb1d263ccf642
-
SSDEEP
384:YD9o1bKtUMw8SJddWjqkrx0vkMNmnhQBvjgPLQ3LBPJsONU0tkxrUHO3G:W9IqE1JsqHkqghlPCL7sONU6kK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b22534de2969f2899aa7ccfbc72809c
Files
-
3b22534de2969f2899aa7ccfbc72809c.exe windows:4 windows x86 arch:x86
7622f3e0fa1f29e79571c383d79ec1cf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFreeEx
advapi32
RegFlushKey
Sections
.text Size: 1024B - Virtual size: 786B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ