Static task
static1
Behavioral task
behavioral1
Sample
3e4f6da89296ce3ed1bc64f83702585b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3e4f6da89296ce3ed1bc64f83702585b.exe
Resource
win10v2004-20231222-en
General
-
Target
3e4f6da89296ce3ed1bc64f83702585b
-
Size
182KB
-
MD5
3e4f6da89296ce3ed1bc64f83702585b
-
SHA1
2fb2d84cc09437636eb5abb799862467aa7afa67
-
SHA256
4de709fa878dfd7da4bf0dda75339a19bfbb9d3c151423a21bed9cc605429aea
-
SHA512
bba77039249c5d62533e4a63db89b6d28700bb293c0e597cb595b3510b3ab327b6b6d6e5b3c43271df5a2a77043c4e56e10f19aadf490dd562b4209dbf39da37
-
SSDEEP
3072:9ielz2tyKSQ+IGgDz7tBfelzH0ktfj9i2laushzbrp/p8YyJKC068x:9ielzayKSmtHbfelT7LUushP9SYGt6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e4f6da89296ce3ed1bc64f83702585b
Files
-
3e4f6da89296ce3ed1bc64f83702585b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 141KB - Virtual size: 235KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ