Static task
static1
Behavioral task
behavioral1
Sample
3b6f27d776c8a16c61292b8a6853f429.exe
Resource
win7-20231215-en
General
-
Target
3b6f27d776c8a16c61292b8a6853f429
-
Size
56KB
-
MD5
3b6f27d776c8a16c61292b8a6853f429
-
SHA1
980f6dc29fc9d66d43f145d0fd8297e80b1e1a2b
-
SHA256
9a058614a0f3940e9a0dcbbe187b880d58fe2fc16bf96053b271b585780a0c26
-
SHA512
cd39ff35ef3b250557672f4a08893ad3a99f95fdf902b2b83c9ecca9424f120888795437dad28b4f168c7ce258d687d56a54d0ffc0cf558ee38e34107e61be28
-
SSDEEP
1536:GIyhnf+/y29wARn3sNTrzNGZ8Ft55PJa52XAho/:GIKnfdywI3+H8Z4rXwo/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b6f27d776c8a16c61292b8a6853f429
Files
-
3b6f27d776c8a16c61292b8a6853f429.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
holmes0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
holmes1 Size: 55KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE