Static task
static1
Behavioral task
behavioral1
Sample
3db9a66bc9229ceff7810de82e9d82fa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3db9a66bc9229ceff7810de82e9d82fa.exe
Resource
win10v2004-20231215-en
General
-
Target
3db9a66bc9229ceff7810de82e9d82fa
-
Size
54KB
-
MD5
3db9a66bc9229ceff7810de82e9d82fa
-
SHA1
397b61b7ef9e0ab2de09b13570215915ffc255e2
-
SHA256
ecf79156312b38eef7c9b7ad59e784740446f24eb4278b6449d6bd1ba38db273
-
SHA512
1ea9aa30213d894942c25613438c250fcd11e465ef2873ba501006268528467f3577e816f8b557af271cd711394c0690527a71bb73cce829eaddf3ff014c9cc7
-
SSDEEP
768:MevFIYm0on6HGavZRtQffoaFNnioeQpYG+ZeCdQzxBenxuUk/zFX9i4DEi/mwI0w:FcV6HGavqga0rESZ85Q4k0LvvHc22
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3db9a66bc9229ceff7810de82e9d82fa
Files
-
3db9a66bc9229ceff7810de82e9d82fa.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ