Static task
static1
Behavioral task
behavioral1
Sample
3abd4fb7e5bc49d9f7b6db7cbf6d3c57.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3abd4fb7e5bc49d9f7b6db7cbf6d3c57.exe
Resource
win10v2004-20231215-en
General
-
Target
3abd4fb7e5bc49d9f7b6db7cbf6d3c57
-
Size
132KB
-
MD5
3abd4fb7e5bc49d9f7b6db7cbf6d3c57
-
SHA1
1e663b62d6ba7b3604b485b405432f85f352d478
-
SHA256
c79f898049ac992a7bd3d7cff7c3c6e37fb86c9916518a92e186464e5a62fae7
-
SHA512
39b61c951ec79aa6076d0d2b9e98cee8b31bd119ea6b0c6e2b646dacff067a958092ada0c4faa5972f4e641ea4eaaebf2c606d6af3fca5b63da6281efb130a43
-
SSDEEP
3072:T9LE8wHkwzNSW7YDJQMmYGDbTz2zRzJL6:T9LE8Jwz4WkJ/mjDbTzEJL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3abd4fb7e5bc49d9f7b6db7cbf6d3c57
Files
-
3abd4fb7e5bc49d9f7b6db7cbf6d3c57.exe windows:4 windows x86 arch:x86
ac1ce41952df5350c1b880439226e18a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomA
LocalShrink
GetConsoleAliasA
RegisterConsoleVDM
SetLocaleInfoA
GetLargestConsoleWindowSize
ReadConsoleOutputAttribute
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
data Size: 8KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ