Static task
static1
Behavioral task
behavioral1
Sample
3b8187b48e59b682bf0b9d9769a8a8ce.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3b8187b48e59b682bf0b9d9769a8a8ce.exe
Resource
win10v2004-20231215-en
General
-
Target
3b8187b48e59b682bf0b9d9769a8a8ce
-
Size
97KB
-
MD5
3b8187b48e59b682bf0b9d9769a8a8ce
-
SHA1
42e6da29bc05e0d6d47e7c36306a2a97924eb5f5
-
SHA256
93c2bff0a8c60ffdc99ba6c87a6ed1c49ce5c8c900844d2fa8812b2daab3c16e
-
SHA512
f62be79704f0bcdc8510cdbcdf480c21b23b5cc5e4ae6ec44308ac5f46b97272e104bbf581a7f9214c24e076bdbf700c09efdff74eabeba8970f6055347c8554
-
SSDEEP
1536:rDbnpLJMWh/C6AE0tJOuvWe9G31iXPnKZLFc24tNVe7ZE4eJTPL:bpNd5iWV3qKhFc24leNE4eJTPL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b8187b48e59b682bf0b9d9769a8a8ce
Files
-
3b8187b48e59b682bf0b9d9769a8a8ce.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
pf #K Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ