Static task
static1
Behavioral task
behavioral1
Sample
3974a6fa1da61a3c6614be3647ceec54.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3974a6fa1da61a3c6614be3647ceec54.exe
Resource
win10v2004-20231222-en
General
-
Target
3974a6fa1da61a3c6614be3647ceec54
-
Size
9KB
-
MD5
3974a6fa1da61a3c6614be3647ceec54
-
SHA1
33f2fdaee744d8cef097ba9d3521b392af81fa54
-
SHA256
c83520e877251e04f53bfe3e0fcfefe8db503006a7013e57f5c35300604f6bd7
-
SHA512
6eebde24edaa76815dd2b0b31cd7441984627e9794c7f04d587130d99ffec18ae26ca2f57d4679468b102b7e939fe438a295e4699871f05d9af8389e94d3a483
-
SSDEEP
192:mEK2zc4p/LNnauGR2XvGX3Hq6DZSMo5YeQX+IzL:mXucU5aHRVXa6Ve5Nsz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3974a6fa1da61a3c6614be3647ceec54
Files
-
3974a6fa1da61a3c6614be3647ceec54.exe windows:1 windows x86 arch:x86
187e9beb13fa587e5cb8894ec5641134
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
user32
CreateWindowExA
RegisterClassA
TranslateMessage
Sections
.data Size: 512B - Virtual size: 784B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 232B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ