Static task
static1
Behavioral task
behavioral1
Sample
3d70570bf574330ac1c854e28eca2b1e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3d70570bf574330ac1c854e28eca2b1e.exe
Resource
win10v2004-20231215-en
General
-
Target
3d70570bf574330ac1c854e28eca2b1e
-
Size
1.6MB
-
MD5
3d70570bf574330ac1c854e28eca2b1e
-
SHA1
6dec41c5fbe7f695bd569dd6a7908eae5806b6b6
-
SHA256
f90c909371add44ab8f0d0fbff9b34fc25a51a857bf5085611a16824d93a203a
-
SHA512
3616429c65217ebcbd9460228fc6f993f29c1d902c05e836cb30f799a99f63a82e6559cecf97accd6d04cad69d83860e412cac306e2a74da3146da15d4c9524c
-
SSDEEP
49152:QQT1vHO6SZui0dNG3g0jiGYBCxV5XkB4JC3:Qo86icNWmeF0as
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d70570bf574330ac1c854e28eca2b1e
Files
-
3d70570bf574330ac1c854e28eca2b1e.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 964KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hfpcslqh Size: 676KB - Virtual size: 676KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ualidvsr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE