Static task
static1
Behavioral task
behavioral1
Sample
3bfadb73a0a1527f80fecfadf4a8dc26.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3bfadb73a0a1527f80fecfadf4a8dc26.exe
Resource
win10v2004-20231215-en
General
-
Target
3bfadb73a0a1527f80fecfadf4a8dc26
-
Size
303KB
-
MD5
3bfadb73a0a1527f80fecfadf4a8dc26
-
SHA1
f88e8d6440257839f5fec95e244e24caf07f85d0
-
SHA256
f393b1defcd3680170d67efeae54c225e6b5c96bce443514ab7c092b6635a938
-
SHA512
c308e005fa94e645a114d08e51c8061356589ff347109fb0e0e30d539e003e828a5662bfbf33b90075a6a923deee97b76ee68906d0a71b5969a20d7a5b57f347
-
SSDEEP
6144:IN30u9tVC4o+BUeH5i6BXqQwhO0oSAm7CY+u+tx1NtCrDYVCBxZz2/qPRxRQ:qku9nCoUeHM61J+O0M3C+txjtof2iRxy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bfadb73a0a1527f80fecfadf4a8dc26
Files
-
3bfadb73a0a1527f80fecfadf4a8dc26.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 836KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 302KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE