Static task
static1
Behavioral task
behavioral1
Sample
3af7a478cf72447c85f676a4be0d6823.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3af7a478cf72447c85f676a4be0d6823.exe
Resource
win10v2004-20231215-en
General
-
Target
3af7a478cf72447c85f676a4be0d6823
-
Size
1.4MB
-
MD5
3af7a478cf72447c85f676a4be0d6823
-
SHA1
6005bc0f8c3911785c905bd3affbbcc7c63c01d4
-
SHA256
e475600ec5f361d5e9a71f13cd9f024216d95b97979a6703aafc8745e851d2dd
-
SHA512
1744a42972ce03f925595a23534d4ad1f2f40844e3ed264016f0d58e5e72831de591b07a70827f8b626cbd9bf7dfbfb0f67550bc334f03d8a89639649860e1e9
-
SSDEEP
24576:yOoHMp0tbSlnB/C2RawqxRcr7tYxn+800R87ifMwgSpPSgAVkTN4dhomvQq8U+L6:yFHMpYeLawq0rQn+8wifM69Ckh4f9Yvt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3af7a478cf72447c85f676a4be0d6823
Files
-
3af7a478cf72447c85f676a4be0d6823.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 239KB - Virtual size: 4.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE