Static task
static1
Behavioral task
behavioral1
Sample
3aaf8fd4cdf13a32f893d5bed18ffb79.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3aaf8fd4cdf13a32f893d5bed18ffb79.exe
Resource
win10v2004-20231222-en
General
-
Target
3aaf8fd4cdf13a32f893d5bed18ffb79
-
Size
877KB
-
MD5
3aaf8fd4cdf13a32f893d5bed18ffb79
-
SHA1
250e5b9d67695d4dccbfc28ef8feaddbf59b9e21
-
SHA256
68f30f9aba9efb23856e14bdf2de9bdb8ce11acf17522ea3a9dcdf38f552603a
-
SHA512
eb6be2594f9b4f0a4941309d83364a3059cab0f973aaecea20eb180895d01980e871da635296ee7923c48dcbcd319cf4fa256ad7174f39f3d727f33b70921ec3
-
SSDEEP
24576:/OPVOloJ5ZRpsMYK0QyGDNIUl2R0eN8FBU0YfIgmjSA6e4VpyJRq7rim+asfv0/K:/MsloXXpeKTTBIUWAFBIAAA6euk30/Ov
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3aaf8fd4cdf13a32f893d5bed18ffb79
Files
-
3aaf8fd4cdf13a32f893d5bed18ffb79.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 267KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ