Static task
static1
Behavioral task
behavioral1
Sample
3c772e04b2885f989ec8631f9bb90279.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3c772e04b2885f989ec8631f9bb90279.exe
Resource
win10v2004-20231222-en
General
-
Target
3c772e04b2885f989ec8631f9bb90279
-
Size
11KB
-
MD5
3c772e04b2885f989ec8631f9bb90279
-
SHA1
15c68a25ae36d20fa214184a6ddaca53e11afa22
-
SHA256
4421c384159f43e45d56bbd9f2694ba272bfc9fdfaa0c5b188690ac68a3d7817
-
SHA512
0b26aa2d400d51c18ab743347110e94fdc02e1689dec5527d65ba9f85cf76a400fbd9c1b3e9d9b470e694de9d91bc037ea7ad056c28b44dc51aab3fd68d17cee
-
SSDEEP
192:SYa2DV9JAqZBEk/U/F6PBwu2B1XirkVeVugcTXB28E1/kzN5Js7F:7ZOdi2k4xrB28E1/eNjsh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c772e04b2885f989ec8631f9bb90279
Files
-
3c772e04b2885f989ec8631f9bb90279.exe windows:5 windows x86 arch:x86
330ae68fd35ae99521a0ac6a1fd9b999
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
Sections
���~V�Yh Size: - Virtual size: 816B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
V�g��nH Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
%Ch�}K~- Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ