Static task
static1
Behavioral task
behavioral1
Sample
3a9d8ac826b42adefccc3e14069485ae.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3a9d8ac826b42adefccc3e14069485ae.exe
Resource
win10v2004-20231215-en
General
-
Target
3a9d8ac826b42adefccc3e14069485ae
-
Size
821KB
-
MD5
3a9d8ac826b42adefccc3e14069485ae
-
SHA1
a601207cbd87a32533f72ebfb20ceb66a684a09b
-
SHA256
12d7f3f1ed2463c6ef78fb8b923da9efc53a750ce65cee8f0d7d422da95866ff
-
SHA512
82fe378b88275ef1ca327209138b82a7e863cb52710caa184496414ba82cbbfc584ea0cb40fdf3adc048c046fdccbce96df206df506fc09a1da759d28fcd512d
-
SSDEEP
12288:U2V5C1LvjjqfrZFFXKpk1J3WyNltCDcZAc4XsUMzIe01Lv4c/R+fEeV:bI1LbOv11nltVZAc43M30LT0EeV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a9d8ac826b42adefccc3e14069485ae
Files
-
3a9d8ac826b42adefccc3e14069485ae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 240KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 324KB - Virtual size: 323KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zwt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE