Static task
static1
Behavioral task
behavioral1
Sample
3beab28455cdc4da73571575703faf24.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3beab28455cdc4da73571575703faf24.exe
Resource
win10v2004-20231215-en
General
-
Target
3beab28455cdc4da73571575703faf24
-
Size
313KB
-
MD5
3beab28455cdc4da73571575703faf24
-
SHA1
0f9f1e56243099590bf4e88b49dc5b6261992c65
-
SHA256
7e0f309390d633c2be9bd37b26f6b0a7ddf60a9c55fc4d6ee1f1e3c8535631c3
-
SHA512
bbc0098867c0c4b483c56b247f867cf9c209a87805cbe3093d1c073026324b0b12ba1ade4599d436a89624c7da9910ab888baeb8f5e6de222dc5f91472008d47
-
SSDEEP
6144:nBZk6gYkSc6Dfe3o/bCs0ud7f2owt03qwCAUva+iDn2:nZHkADworPdr2owaVbn2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3beab28455cdc4da73571575703faf24
Files
-
3beab28455cdc4da73571575703faf24.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 272KB - Virtual size: 828KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE