Static task
static1
Behavioral task
behavioral1
Sample
3d0efb81300608dab931f390c3640402.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3d0efb81300608dab931f390c3640402.exe
Resource
win10v2004-20231215-en
General
-
Target
3d0efb81300608dab931f390c3640402
-
Size
81KB
-
MD5
3d0efb81300608dab931f390c3640402
-
SHA1
208b88c2546f2288b6d2c050dfd5dcc814e907d2
-
SHA256
c98cbddbcca54775eebde370f5e0cbf271e695c80a14aa7a27a947f927e8e061
-
SHA512
ee94292045ff34e2c7b38321ecb375b451027193c2875a36035002fb5a786309a478d6fbc150a882cef0c1770cd2de5ab4d3e024a5af76ef0966e2ff8bf10862
-
SSDEEP
1536:IA0lWx0ynitJSubIiPNdTTEIeMpaFL2LGbM+aH7k68Bk:Dbi3LbDX8TvFL2Louv8G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d0efb81300608dab931f390c3640402
Files
-
3d0efb81300608dab931f390c3640402.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 89KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ