Static task
static1
Behavioral task
behavioral1
Sample
3a4af8604fcbaf6c107c4282278ad63c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3a4af8604fcbaf6c107c4282278ad63c.exe
Resource
win10v2004-20231215-en
General
-
Target
3a4af8604fcbaf6c107c4282278ad63c
-
Size
1.6MB
-
MD5
3a4af8604fcbaf6c107c4282278ad63c
-
SHA1
5102621533b9c49a002997cf681d1aec8bff4a7b
-
SHA256
36df5183120adc48cfaa25f03dfbb055b5f5c125deb93bbb02fa45791118a646
-
SHA512
f574c3d47bcd8d1ac7441115d60d54211808c02ef58b94334465dadbbf593ae9e449f33245ac108525ecd79a413f75f6e030249b1e136811fa5ede839fe10d05
-
SSDEEP
12288:UZWtI6RkIaku9OWakudO+aku9OWakudO+aku9OWakudO+aku9OWakuHH:UuhaPCaCaCaCfH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a4af8604fcbaf6c107c4282278ad63c
Files
-
3a4af8604fcbaf6c107c4282278ad63c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ