Static task
static1
Behavioral task
behavioral1
Sample
3a0ae36a5f4ce479cca1464f3478dc47.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3a0ae36a5f4ce479cca1464f3478dc47.exe
Resource
win10v2004-20231215-en
General
-
Target
3a0ae36a5f4ce479cca1464f3478dc47
-
Size
43KB
-
MD5
3a0ae36a5f4ce479cca1464f3478dc47
-
SHA1
aee6d7b40189c6929ab81d6f2c45cb08285c4dfd
-
SHA256
2ce11e6d4bf5b26ba56d99e92c9efce07c1c31545e9897ca4581b7f8898452f7
-
SHA512
82b368dde69016242c2b9bece9f0d67f0bb08539856d6e0691c494eb20d27453d6b2fdecd9a4cacdaac340c878f4d9f9ef01d244c2e14d3e6837c23429bea5b7
-
SSDEEP
768:0aHxcDL9P50QSi+Hma7DJVFhnYib1RJwpKCSTs2GVYpSzRrmAdtyjZGGYttFz/ct:LS59SdHfVJzJwMXI2GV2Szddt+M/z/yp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a0ae36a5f4ce479cca1464f3478dc47
Files
-
3a0ae36a5f4ce479cca1464f3478dc47.exe windows:5 windows x86 arch:x86
82174f8f4f13ba05c2907f7282dfb819
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageW
SendMessageW
kernel32
FindFirstFileW
Sections
.efapez Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fsdcf Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.snerwp Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ