Static task
static1
Behavioral task
behavioral1
Sample
36df064a1418513c25b143fbc173e879.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
36df064a1418513c25b143fbc173e879.exe
Resource
win10v2004-20231215-en
General
-
Target
36df064a1418513c25b143fbc173e879
-
Size
351KB
-
MD5
36df064a1418513c25b143fbc173e879
-
SHA1
213760b94aa7f429f5beaac6d30102f6783b4a9f
-
SHA256
dc3ebee18d1bb347eabe61529119048e84c11bf9b68a6e7831bc9c275288b54a
-
SHA512
7aa44739b98be55bf0a746cd219d403d1240584c9e029043c381824b2cea2bef717220aef85297fc4a7e3d1d24a4533bb3b70bc77d7855ef3b3bf7a06986301c
-
SSDEEP
6144:BijX7Cceo2CCcdB4TohsM5OS1W22bEcIDxqA7eMbJZxE33TkNpZVmLucRa5fW:EjLCceo/uTMsM4S1WlEcqqLMbJQnKDcd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36df064a1418513c25b143fbc173e879
Files
-
36df064a1418513c25b143fbc173e879.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 350KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE