Static task
static1
Behavioral task
behavioral1
Sample
3893c685912a05edc1d56bc85ec7a334.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3893c685912a05edc1d56bc85ec7a334.exe
Resource
win10v2004-20231222-en
General
-
Target
3893c685912a05edc1d56bc85ec7a334
-
Size
288KB
-
MD5
3893c685912a05edc1d56bc85ec7a334
-
SHA1
07e008b5fe2ee3145bed74a95bbdc61d80dcfbfc
-
SHA256
0e375fb81ff2519c17e7689e10d157402ad97b56fa4259fc087e49fbb5dcbafc
-
SHA512
23e8f5b78f0d94f2b1157863f0eb5523cce44e4c6f4a638bb74bbc7f4ed7d3816ff3ce01b9fe00a927a81398a8050432f867d3b004660c9133189d2dfe63d9e2
-
SSDEEP
6144:dQKFR9sv6nBTrXnWvF/G0BUCDMO7m4kQkHwetdnloerej0:RfiinBTrX4tRJMOCvH13nie4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3893c685912a05edc1d56bc85ec7a334
Files
-
3893c685912a05edc1d56bc85ec7a334.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 263KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.MaskPE Size: 512B - Virtual size: 198B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ