Static task
static1
Behavioral task
behavioral1
Sample
3893b0bd5b01c3ce6b91a6e2de0776bd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3893b0bd5b01c3ce6b91a6e2de0776bd.exe
Resource
win10v2004-20231215-en
General
-
Target
3893b0bd5b01c3ce6b91a6e2de0776bd
-
Size
60KB
-
MD5
3893b0bd5b01c3ce6b91a6e2de0776bd
-
SHA1
acb295431744dd3fe5897f010b93466053756c1f
-
SHA256
9a649d2437e305cc1dd34aa992b6f9f626f0631c206726ce9c197debd5c34c37
-
SHA512
7f1dc0c6c40a37f70c75d2ea98aec8eb7567bdd8f2c4e7fd8cc5e6c556cb390126c2707e4b0002aebe8f3e1e5c12939554bdf582c268f024ad7d26be92025f63
-
SSDEEP
1536:PGOJEk+G6QSMMU0kJv9llaywbyDRpuUkaHIJgCz:52Qr0O1vBpuYPCz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3893b0bd5b01c3ce6b91a6e2de0776bd
Files
-
3893b0bd5b01c3ce6b91a6e2de0776bd.exe windows:4 windows x86 arch:x86
bf61fd0c4995f52e6502284e50c39e02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree
Sections
.df Size: - Virtual size: 376KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.df Size: 59KB - Virtual size: 60KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE