Static task
static1
Behavioral task
behavioral1
Sample
3a54ca085a494e6a3309d11a4e001e28.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3a54ca085a494e6a3309d11a4e001e28.exe
Resource
win10v2004-20231215-en
General
-
Target
3a54ca085a494e6a3309d11a4e001e28
-
Size
376KB
-
MD5
3a54ca085a494e6a3309d11a4e001e28
-
SHA1
188d8780e18ece96c9ce97285e6a045b5a2fc817
-
SHA256
8cdd8646b6d1942af130c3a64a38e60f2f27e16f6fe9ce0622380559a0ee7fe6
-
SHA512
322cfaebbb65c0fe35d6f7372d944ca63fb496ffd0023e43f93455a3b08c74ca480c8b93f8e3077df9be2bd2041e75eaf9e8ee0a534b1f5ad320438d19771f71
-
SSDEEP
6144:+BiBwFn7dHOD4D9A2D0/ZufExOpKXywbhgf1LzlCG+VOVaWV62qXQZu8LKK+g:F6Xuca2D4PxXCw9sc7gaWVsX5s8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a54ca085a494e6a3309d11a4e001e28
Files
-
3a54ca085a494e6a3309d11a4e001e28.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themda Size: 348KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE