Static task
static1
Behavioral task
behavioral1
Sample
3a210b29d76e4befdf6a8033f612da35.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3a210b29d76e4befdf6a8033f612da35.exe
Resource
win10v2004-20231222-en
General
-
Target
3a210b29d76e4befdf6a8033f612da35
-
Size
3.3MB
-
MD5
3a210b29d76e4befdf6a8033f612da35
-
SHA1
0fc0d93499458c511ecf92ef4d71c384587ebc1a
-
SHA256
15e4b6dd3be192cfc1bd142a75a8a294c7675ec045750676bef496e621489a86
-
SHA512
a52d331d3e1d1de6d0b1ca883bd131fcf35dd06e5e4286cc28a1f963311ffe9435b7bb6efff5d04d2a9695da04a9fe6b27cc15021bfb361dfddbf68caf918c5b
-
SSDEEP
49152:qYNg1GHcTUVONUxGWrFtbZhNhGjno26tMvato+CfugUjifK5tbRzx1l5sAflCjCf:fN5xIWhtdhrf2Fnf+RBj5NCj+y9ut26
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a210b29d76e4befdf6a8033f612da35
Files
-
3a210b29d76e4befdf6a8033f612da35.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 1.4MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 214KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ