Static task
static1
Behavioral task
behavioral1
Sample
36c9e459dedc1b27a6951fc2588a5085.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
36c9e459dedc1b27a6951fc2588a5085.exe
Resource
win10v2004-20231215-en
General
-
Target
36c9e459dedc1b27a6951fc2588a5085
-
Size
241KB
-
MD5
36c9e459dedc1b27a6951fc2588a5085
-
SHA1
c39a400f26fab8ce08d7ea3de33530f4d19255d5
-
SHA256
46b142126a3ba29a1405c5f3ff821d9f3f74edca9ce334440bb459fdaa94a03f
-
SHA512
7b62a498e1822ca565be8d414494c3d63895e6e7d1c3fb6e5c3d7755c4b60c99d49f7e93cd6509d808ed2fa264bb17af56bece1bad2c1fd0d22e55879eaecc15
-
SSDEEP
6144:cVaSYGoXEy8xzXW+c2W9sThG28Q7rTHxAZnyq:cVYQi+c2W9CoYaF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36c9e459dedc1b27a6951fc2588a5085
Files
-
36c9e459dedc1b27a6951fc2588a5085.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 240KB - Virtual size: 721KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ