Static task
static1
Behavioral task
behavioral1
Sample
36b3da64a5ff5ec31ef6e4f938e4b6f6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
36b3da64a5ff5ec31ef6e4f938e4b6f6.exe
Resource
win10v2004-20231215-en
General
-
Target
36b3da64a5ff5ec31ef6e4f938e4b6f6
-
Size
124KB
-
MD5
36b3da64a5ff5ec31ef6e4f938e4b6f6
-
SHA1
cde92b13db8c8ec0ee13cbef4d808b0755c56ad0
-
SHA256
5efdd9accab84f569339e3597280c31bfb2ddbc42b3590f5ad3f8c4eb2d5c911
-
SHA512
b7a3cceb01d8f83de49fcadb2140da705b1425c0218f291f733ac9c975b6ce44086a463ee5733c2b2c52644ea841b9dfce6e0678686c0b04eae0f82f7047a75e
-
SSDEEP
3072:8OplEEtwFKUfazocU/cfbgXGc58Yzz6sYdGG:8Opqgw/coyTeG+/6v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36b3da64a5ff5ec31ef6e4f938e4b6f6
Files
-
36b3da64a5ff5ec31ef6e4f938e4b6f6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE