Static task
static1
Behavioral task
behavioral1
Sample
36da5fb7d36252b40e344840e9485388.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
36da5fb7d36252b40e344840e9485388.exe
Resource
win10v2004-20231215-en
General
-
Target
36da5fb7d36252b40e344840e9485388
-
Size
298KB
-
MD5
36da5fb7d36252b40e344840e9485388
-
SHA1
c9baa883fdb22261a3bbe9430bba16819441dc58
-
SHA256
6913c031a7a6760f9e3e4b33e9af78f8356560ad226c63d38e27bc5ee000d04d
-
SHA512
32f51482ab567c839e89ecdcc006f0f3719b0c42eaeac603b9a47e3d7595f3d0069efed9738be0b2c0e0e782c190f8beb763dd8eacc658e74286211f057c5843
-
SSDEEP
3072:QlmYSgrFEeArrX8VF0vaF7yeCWfeEPSFi3ymbUgoi1g4r8iShjoAGO89D8BGhkw:6SgrFeMMChCIPx2Y8bhhp8zkw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36da5fb7d36252b40e344840e9485388
Files
-
36da5fb7d36252b40e344840e9485388.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 293KB - Virtual size: 568KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE