Static task
static1
Behavioral task
behavioral1
Sample
3a3f434d1e1207a461ea4d910b2d6301.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3a3f434d1e1207a461ea4d910b2d6301.exe
Resource
win10v2004-20231215-en
General
-
Target
3a3f434d1e1207a461ea4d910b2d6301
-
Size
1.5MB
-
MD5
3a3f434d1e1207a461ea4d910b2d6301
-
SHA1
5428c050333ec4a8c3cae4501579d446dfcc33e1
-
SHA256
489c4b6cfebd03a18eee360289945cad0074ee9635329b69b78b3005fd0bb044
-
SHA512
15238d1b55b2ff3f8d45e8904276cf0b5aace84d0a40721670095d898f80278cdf8d074034871d2a132c5f17bcd7e2dab8e146ff1c931f3ef3aaeac88c4a206f
-
SSDEEP
24576:WRIZ0wzdHd0f8j/wZ7ry9kL2YGSAB4cr16eSo8BoJDVoKGP:BZLzdHdPwFu+6VJxsePuoAP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a3f434d1e1207a461ea4d910b2d6301
Files
-
3a3f434d1e1207a461ea4d910b2d6301.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0000000 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE