Static task
static1
Behavioral task
behavioral1
Sample
3d99cfdef77500ac617fe7ab70fed8bd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3d99cfdef77500ac617fe7ab70fed8bd.exe
Resource
win10v2004-20231215-en
General
-
Target
3d99cfdef77500ac617fe7ab70fed8bd
-
Size
12KB
-
MD5
3d99cfdef77500ac617fe7ab70fed8bd
-
SHA1
356911cde15d064b0d5393818eae57583a1ba100
-
SHA256
490d3c3e9e0ba4f43d482f6ba2bf42f015412d27a9ca405c0618d7c63010d1e6
-
SHA512
fd3a2c2e440939b0288aaf0b5e7b2607132e6e4a4cf3fb219444eb0e42b25190146ffaf4e5e1832baabe41260b0dd72481afc2afc23917f62bde4945e6c46cf9
-
SSDEEP
48:6KDPtt2qmpJWDZK8MuYnS1nIERBRmgoRwpRDcxO2Lxcp3zqJJh8GIqI4M/qMBq:T2l7WDZXxPPRmg8lxWp3zq/w4cqMQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d99cfdef77500ac617fe7ab70fed8bd
Files
-
3d99cfdef77500ac617fe7ab70fed8bd.exe windows:4 windows x86 arch:x86
1b1d083291417e9b2ed712a577a01f1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassLongA
DestroyWindow
kernel32
GetLastError
SleepEx
Sleep
CreateThread
ExitProcess
QueueUserAPC
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ