Static task
static1
Behavioral task
behavioral1
Sample
3beab11923b9d864ce3a0242fc8a3895.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3beab11923b9d864ce3a0242fc8a3895.exe
Resource
win10v2004-20231215-en
General
-
Target
3beab11923b9d864ce3a0242fc8a3895
-
Size
374KB
-
MD5
3beab11923b9d864ce3a0242fc8a3895
-
SHA1
09a62266a774e417f63c2889ae644752020027fd
-
SHA256
7cb7da80c56c366fbfdbdb033f35595520abf6a1b1dc31c07cad43e2a3dbee13
-
SHA512
3c2402e16ee32dcda09014f59355d8cfa5fc96f37c4c8fef090be091ca7327ec22ecbe7c23e6175c5462e144ee2320d613557bbb0bdb6dc4ffc5f96e86d8ad38
-
SSDEEP
6144:Y8pDvPa07u2w3upJsoiu4Qd0m6vmNKvTZLNLpurfXlhMVv:/rP5vUlOCbpuLVhMV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3beab11923b9d864ce3a0242fc8a3895
Files
-
3beab11923b9d864ce3a0242fc8a3895.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 326KB - Virtual size: 543KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 26B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ