Static task
static1
Behavioral task
behavioral1
Sample
3887ad2c69dcf9e656aaf6039ac3bd8c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3887ad2c69dcf9e656aaf6039ac3bd8c.exe
Resource
win10v2004-20231222-en
General
-
Target
3887ad2c69dcf9e656aaf6039ac3bd8c
-
Size
683KB
-
MD5
3887ad2c69dcf9e656aaf6039ac3bd8c
-
SHA1
7b23b58352da219b1ad0f9a02ef9c8904868089a
-
SHA256
c16c973e4903396b6ee20e68071bed97caa11dfdb9511da1549afef6b4f3f366
-
SHA512
833de3005230f38494c6bfb4ac9f19ca7996f1badd6c8b609869357e1e0e49aa621b879f8f2e79d78fe8bd68280aa4d7bc5e5a2455a86413e06e4d45701e7b73
-
SSDEEP
12288:wN25mhWlUY71g0eVcXvGGoZxevQyZdnr/7V+FYlYAjjZTKKbF04eTE:h8U717FOGo/Zeb7V+Fmrjjp5PeT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3887ad2c69dcf9e656aaf6039ac3bd8c
Files
-
3887ad2c69dcf9e656aaf6039ac3bd8c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
312A Size: 609KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
312B Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
312C Size: - Virtual size: 9KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
312D Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
312E Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
312F Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
312G Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
312H Size: 1024B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE