Static task
static1
Behavioral task
behavioral1
Sample
3d5371de7d3cfe48741ae6ec57fa595e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3d5371de7d3cfe48741ae6ec57fa595e.exe
Resource
win10v2004-20231215-en
General
-
Target
3d5371de7d3cfe48741ae6ec57fa595e
-
Size
740KB
-
MD5
3d5371de7d3cfe48741ae6ec57fa595e
-
SHA1
a59cd3379cd8554e312a7588fd757c035ca0245b
-
SHA256
51b07f0beddce59770aa086bb5e5c4f7b2aeafb30b0db5210a98f71e7854409a
-
SHA512
441b0b565f02c00a285bad25f9b0350372e59deba0024cce1eb71e96e7012e6dd352c051ad021f2e64a3d15d3ff3e191b5154736ba0e5f701f1e2f14d9233262
-
SSDEEP
12288:ip/iN/mlVdtvrYeyZJf7kPK+iqBZn+D73iKHeGspfutGuNMstvDpgB1qa:ipQ/6trYlvYPK+lqD73TeGspWtisxVA1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d5371de7d3cfe48741ae6ec57fa595e
Files
-
3d5371de7d3cfe48741ae6ec57fa595e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 636KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 3KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 16B - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE