Static task
static1
Behavioral task
behavioral1
Sample
3a9704aa8c7306b24419b557912d4992.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3a9704aa8c7306b24419b557912d4992.exe
Resource
win10v2004-20231215-en
General
-
Target
3a9704aa8c7306b24419b557912d4992
-
Size
133KB
-
MD5
3a9704aa8c7306b24419b557912d4992
-
SHA1
f29b18b14ea96f93b37687857d4d04ad48b2c57e
-
SHA256
f6e20dd1f0cbaf73b5929bccd33f26c6e8f5d556a63dc8f26b293216534cad76
-
SHA512
3b8ccb037882fa90febaa31729377da21da907b58da49796864d41448c5469510eb037563abd21e89c33e9a68fe731e00485e6da20ee98367cda82c7df59b1df
-
SSDEEP
3072:7EQ/OLsU5zSBk6hPWIwb1GOXCAORUwNNFaZtbkssWV:1/OLsvk60GOSTTFaL1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a9704aa8c7306b24419b557912d4992
Files
-
3a9704aa8c7306b24419b557912d4992.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ