Static task
static1
Behavioral task
behavioral1
Sample
3c20b91f22e6e79ae1210563bec0847b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3c20b91f22e6e79ae1210563bec0847b.exe
Resource
win10v2004-20231215-en
General
-
Target
3c20b91f22e6e79ae1210563bec0847b
-
Size
784KB
-
MD5
3c20b91f22e6e79ae1210563bec0847b
-
SHA1
365b1b24beed85ee571a98711dd967cedef42389
-
SHA256
b0088464c3e165fdd1d8c2be39ca444e7e9ca9ef99617d1d8f8418b6d1674335
-
SHA512
04d618c7a26c500f412a6504f4078532295db99adcfa96b66e353e5f3d3ae203e7b8b0d37fde1335dcb7929dcf27994c86b5a1c36d153a8a46ac747020d2e256
-
SSDEEP
6144:qv13iPBcQNJ0fKQC83akUW1NpaMcYCcmr4DzAuPNdduDvCcB2dEs1OiSr+aB0XV8:W83TQC83aRW1NrZV4fqON9r+VFYOk/9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c20b91f22e6e79ae1210563bec0847b
Files
-
3c20b91f22e6e79ae1210563bec0847b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 672KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.petite Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE