Static task
static1
Behavioral task
behavioral1
Sample
3b29784d9b4d697f1b48add162b786ed.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3b29784d9b4d697f1b48add162b786ed.exe
Resource
win10v2004-20231222-en
General
-
Target
3b29784d9b4d697f1b48add162b786ed
-
Size
7KB
-
MD5
3b29784d9b4d697f1b48add162b786ed
-
SHA1
7900d0a3b6c361d776a4e800f09d435c23c471c8
-
SHA256
c1673e65fa36a87c308f1743f4cb3431186eb4510fa55acf3f359bca95328458
-
SHA512
af137d0eb4418cf8a88111084b3c7054629796953495233a39ca505f63a85c60cf7a003b47e297b1b7ca48b70be456f6dbd573695ca3e70bbfd6597c298e02ad
-
SSDEEP
96:HDVg1k9qCjJoL6u52rAzAPfpe5PvLgYv8gVFgcfxFElpZs:HDPjJoLvAxqvLhvdVFXkT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b29784d9b4d697f1b48add162b786ed
Files
-
3b29784d9b4d697f1b48add162b786ed.exe windows:4 windows x86 arch:x86
c8f468f0ff692b97e5d3e75acb48062b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileA
WriteFile
ReadFile
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileA
WriteFile
ReadFile
Sections
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE