Static task
static1
Behavioral task
behavioral1
Sample
3bdd18250f81ab1a1e00fe39f7bdf8a6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3bdd18250f81ab1a1e00fe39f7bdf8a6.exe
Resource
win10v2004-20231222-en
General
-
Target
3bdd18250f81ab1a1e00fe39f7bdf8a6
-
Size
419KB
-
MD5
3bdd18250f81ab1a1e00fe39f7bdf8a6
-
SHA1
95ce3eaea48c2636bfd26aea8797dd41893c31b3
-
SHA256
3a6239b672eace3897ef439c9df92371971cf46e79598d9316215d41c874a95d
-
SHA512
67565c19565c21497b15129ac5ebf5c10dc19c10d6e77db18398a74091e60354c297b55b02deb99088191d4e94e48e9b394fee83821420ca2f9e341f3b547e32
-
SSDEEP
12288:zdg/NEh7u+7Ilnzt4q6DajSVzYKj86sP/:YWJklnzt1iaOpYOE/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bdd18250f81ab1a1e00fe39f7bdf8a6
Files
-
3bdd18250f81ab1a1e00fe39f7bdf8a6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 224KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 191KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE