Static task
static1
Behavioral task
behavioral1
Sample
3dfe470e4ba64efd594486b155d138c7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3dfe470e4ba64efd594486b155d138c7.exe
Resource
win10v2004-20231215-en
General
-
Target
3dfe470e4ba64efd594486b155d138c7
-
Size
672KB
-
MD5
3dfe470e4ba64efd594486b155d138c7
-
SHA1
40d5e7a5ac7efa1c83a59ff1bc688072f45b5e33
-
SHA256
b680129bdddc8c41858b2bd5077e4c40ae744d1ed7a92eed930ee467959e3124
-
SHA512
84a13b03b39b4d3d96d40f7cffb1c6298d9ad24d89f30cdc38481cbaecece291990fb2d762393977756e77bdf33a8db04939482b58e1e0a64fab33cf404104db
-
SSDEEP
6144:CDgiz2wNlXhnNMjruFtRTJ8SBVtpcuTLySEVy7DFhBMJzPnYa8gfjV+w+UxoZ:O2ilRnEruv9tphLpEUjBMJDYpcP+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dfe470e4ba64efd594486b155d138c7
Files
-
3dfe470e4ba64efd594486b155d138c7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: 472KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE