Static task
static1
Behavioral task
behavioral1
Sample
36e3039311121ce3f8c1d306440bf5aa.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
36e3039311121ce3f8c1d306440bf5aa.exe
Resource
win10v2004-20231222-en
General
-
Target
36e3039311121ce3f8c1d306440bf5aa
-
Size
34KB
-
MD5
36e3039311121ce3f8c1d306440bf5aa
-
SHA1
d5a9ea516a4eee658d94c83dec195931381a9999
-
SHA256
be47e55db739d254387ba578df9ae121d734925fa439f17c67fcf6e2113e6a72
-
SHA512
3347bbfc037f877697c7f90b708bdabc16f51daef79c470dfaba49c1c1dfb2b9dbda4ec2324078ac4540b0982e4b41641de613737181242a3b2d15b7d3b72b77
-
SSDEEP
768:PYkw0FPfkB7xfF7zGlSFPizUtore4yNv6t5xuhKf8WV8xjs:PYqstHGA6reDNv6N8K9O9s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36e3039311121ce3f8c1d306440bf5aa
Files
-
36e3039311121ce3f8c1d306440bf5aa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dswlab Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shoooo Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE