Static task
static1
Behavioral task
behavioral1
Sample
3788c3ff6d78d861fe02992c29f58634.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3788c3ff6d78d861fe02992c29f58634.exe
Resource
win10v2004-20231215-en
General
-
Target
3788c3ff6d78d861fe02992c29f58634
-
Size
212KB
-
MD5
3788c3ff6d78d861fe02992c29f58634
-
SHA1
5544525ebf96b537434455d16adc232512441089
-
SHA256
ecb8c2725650ce6b009f4f480fe4b24f491cd6441e1a89e52dff8c87103b7459
-
SHA512
052f96c869ef39ef089196f9298d80d41660bc47c072f24622b07465b8b848173aa080c85ac490d9fa23a9995ea8ef26495618c2c530dbda100f82fb5edc1ef2
-
SSDEEP
6144:nbA2nh6U1ax8YSOLoJzD1Y8XVaQe27cu0IR46:Mtm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3788c3ff6d78d861fe02992c29f58634
Files
-
3788c3ff6d78d861fe02992c29f58634.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6.9MB - Virtual size: 6.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ