Static task
static1
Behavioral task
behavioral1
Sample
3d893194632ecd530a9ba5daf53cec62.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3d893194632ecd530a9ba5daf53cec62.exe
Resource
win10v2004-20231215-en
General
-
Target
3d893194632ecd530a9ba5daf53cec62
-
Size
21KB
-
MD5
3d893194632ecd530a9ba5daf53cec62
-
SHA1
62a6946000413abd989b5a425b808a7fb71e6919
-
SHA256
2b65868fc47375768d22b7639cd612514b8dd27a2f42122c84b0c9b662d163e1
-
SHA512
2f2015d7d9227153801215c7946099792ea794762e33067c8d4bae4b8e9ad8337510ce725295871047fa0d6023fb9e6ce989604a9614ac5f1d05bcf01828bf2c
-
SSDEEP
384:CYUNPKYi1bAOrEkRUjIWTMvijD1/zJxxVjQBYeztFyhcXA:uXOrEk2TMiD179ExFj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d893194632ecd530a9ba5daf53cec62
Files
-
3d893194632ecd530a9ba5daf53cec62.exe windows:4 windows x86 arch:x86
2c35ed123bf7fb5532653325910c7a41
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree
Sections
CODE Size: 17KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.llydd Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE