Static task
static1
Behavioral task
behavioral1
Sample
3686add615c5a3a3dfed005644f13a23b2f394167cc57daad526e8b8f29b922e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3686add615c5a3a3dfed005644f13a23b2f394167cc57daad526e8b8f29b922e.exe
Resource
win10v2004-20231215-en
General
-
Target
3686add615c5a3a3dfed005644f13a23b2f394167cc57daad526e8b8f29b922e
-
Size
394KB
-
MD5
d51ad3f0c76fbdeda90cda1c562b8d31
-
SHA1
8dc7a67d01fde2f1b029c689887f003f7d1f0645
-
SHA256
3686add615c5a3a3dfed005644f13a23b2f394167cc57daad526e8b8f29b922e
-
SHA512
bc41ce91ce2e00b699f648b868339dd9836b46ee0a8ce3ebb641102a2170a0da788878f7f862248b35f15d15b3547be83a6d0ccad6c4c9447f5f415c3f5790a6
-
SSDEEP
6144:suhU+12kirx7cT8+RaldykuLhk6vGsQVpndOCHegWXfQ2Kvd8F1/VFr5I+YKB5mn:tU+Ihrx7iabeJJQsCHenIJAt5II5qJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3686add615c5a3a3dfed005644f13a23b2f394167cc57daad526e8b8f29b922e
Files
-
3686add615c5a3a3dfed005644f13a23b2f394167cc57daad526e8b8f29b922e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 391KB - Virtual size: 391KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ