Static task
static1
Behavioral task
behavioral1
Sample
36c6f97fa17f550b8b4d07ee8443145d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
36c6f97fa17f550b8b4d07ee8443145d.exe
Resource
win10v2004-20231222-en
General
-
Target
36c6f97fa17f550b8b4d07ee8443145d
-
Size
385KB
-
MD5
36c6f97fa17f550b8b4d07ee8443145d
-
SHA1
896e757a55a20dd9146af630e2c7a81b40541f8c
-
SHA256
62cf1195f039dd669f792b889853be0d1654b158a3df6468a614203336d56277
-
SHA512
0d645b823892947a2d2e22e87894039806d4066d79f8bc88805e3ca3c8522323c8dd73b7d182cbfd253dcc55a232b408a0a2de8758e9e98d0c74e163ba0f73cc
-
SSDEEP
6144:KMTbRwRM3Ogu0BibLtvo+Oz8iTaWau38K4RqTJSMgoRa/IwoPvNGHgB:uA/uwibLtSoiTaWhMKeqEMvcbodGAB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36c6f97fa17f550b8b4d07ee8443145d
Files
-
36c6f97fa17f550b8b4d07ee8443145d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ