Static task
static1
Behavioral task
behavioral1
Sample
3683531adf08bdc467e031599d0ede25.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3683531adf08bdc467e031599d0ede25.exe
Resource
win10v2004-20231222-en
General
-
Target
3683531adf08bdc467e031599d0ede25
-
Size
64KB
-
MD5
3683531adf08bdc467e031599d0ede25
-
SHA1
391d5defa447f0133e7d68352b01a5881893fd3c
-
SHA256
c91cb1208122d6ca03a84b1356d94d9f369d1088d184f999de041e68aa441ede
-
SHA512
19b3d2e3f31600ed850dd75b531883105cd4f63036071fac6a1b9b621fd6fd509b8e9ca1b796c41f34882ff318dec446dfb8b758b0961bab93399331c81e5a64
-
SSDEEP
768:z1ENiBEdQbUaoCgyu/JwJ8enAOS/oLoBbYDyBADM4ycxxLXQBiPRZ:z24EdQbUaju/J/en4cxx7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3683531adf08bdc467e031599d0ede25
Files
-
3683531adf08bdc467e031599d0ede25.exe windows:4 windows x86 arch:x86
93ef61e279b9c19e8599e6fc012198c2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetHandleInformation
GlobalMemoryStatus
GetUserDefaultUILanguage
SetSystemTime
MultiByteToWideChar
GetPrivateProfileSectionNamesA
GetCommModemStatus
ReadConsoleOutputCharacterA
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
icode Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
idata Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ