Static task
static1
Behavioral task
behavioral1
Sample
3a22c9aafc72fe1d5a23ede06aaf7e89.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3a22c9aafc72fe1d5a23ede06aaf7e89.exe
Resource
win10v2004-20231215-en
General
-
Target
3a22c9aafc72fe1d5a23ede06aaf7e89
-
Size
156KB
-
MD5
3a22c9aafc72fe1d5a23ede06aaf7e89
-
SHA1
6b3bcd7818683eece1ca4e9f6b3bdd7cacd4d3da
-
SHA256
14ee74d228c5847f3a08d825f355dc168889254fc6dff333b758753767831448
-
SHA512
5d4900c1dae60309bb8f5ea14059b9d1b5c88365888be4d1d781397a25a63a09ed635270d4a8a9b9717b921b63a4a204d552e931244c54ca84bdd090e6a4aedd
-
SSDEEP
3072:4GstksnBG22QZkCnZO/TIxM75QHPUk090C5mo6Atbqk:JANn4JqCIxA5eMk090CR3Mk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a22c9aafc72fe1d5a23ede06aaf7e89
Files
-
3a22c9aafc72fe1d5a23ede06aaf7e89.exe windows:4 windows x86 arch:x86
de39dc68941cc6307e3b2590c857a907
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
Sections
.text Size: 52KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.adata Size: 68KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE