Static task
static1
Behavioral task
behavioral1
Sample
3b0c76246b25941d61939a76584f9d8e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3b0c76246b25941d61939a76584f9d8e.exe
Resource
win10v2004-20231215-en
General
-
Target
3b0c76246b25941d61939a76584f9d8e
-
Size
386KB
-
MD5
3b0c76246b25941d61939a76584f9d8e
-
SHA1
f309209d5228fd4208bd550e2fa7b14e2d94a5b9
-
SHA256
7ab609a4957f6d622f41fd195c4bbd3e634e6563dc3e704b84ec701758bec861
-
SHA512
56e2a6b762800bb4c02721083b86afb9e6929924e91d6713a5b530e5310928ceb601a7ef93c8a0bb4981e66082fa0c7e9d8472e5fae0e1cebb290cf7f169ef65
-
SSDEEP
12288:qmKtILkpCuBt6j44YZkpf7z7opFBAGrD6E:qRmDuz4rhf2DN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b0c76246b25941d61939a76584f9d8e
Files
-
3b0c76246b25941d61939a76584f9d8e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 325KB - Virtual size: 325KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ