Static task
static1
Behavioral task
behavioral1
Sample
3dfb5d258e85fa54017036f37fec22fc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3dfb5d258e85fa54017036f37fec22fc.exe
Resource
win10v2004-20231222-en
General
-
Target
3dfb5d258e85fa54017036f37fec22fc
-
Size
1.9MB
-
MD5
3dfb5d258e85fa54017036f37fec22fc
-
SHA1
1028d0a41be4e0bf31a1d9d07079c6a2f062a318
-
SHA256
edb41795749acd73a1315995619e741af62b2df818b14599e8886e4a612b2996
-
SHA512
42c4ed65cddedcec299db5235bbfb503ce3bc31dee57ad305295cfb5131021be7393318b83a02dc9ff010a0d0352484b6367aa0bebe478283a8d4efc8d0da774
-
SSDEEP
49152:KWQGC0PF2zAgZzPCfCEo4wVarGf0hxwcdC:KD8otZOM45yH9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dfb5d258e85fa54017036f37fec22fc
Files
-
3dfb5d258e85fa54017036f37fec22fc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0a Size: 1.9MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE