Static task
static1
Behavioral task
behavioral1
Sample
3e5b32392c5e511cf5e3cd275b03275e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3e5b32392c5e511cf5e3cd275b03275e.exe
Resource
win10v2004-20231215-en
General
-
Target
3e5b32392c5e511cf5e3cd275b03275e
-
Size
80KB
-
MD5
3e5b32392c5e511cf5e3cd275b03275e
-
SHA1
922a50f6f78b0fadf89e4a21487652a0f444ba99
-
SHA256
4f137ad137c19379f07afc7e26b474cb6840d4c20edcd481cf0d11e2460ac479
-
SHA512
34c4f75d6049b94b4b10e11bc43982a09730b1bfae15075edf8e7c402732150224718974526e7c4f7ab40d04f6e50691146aa5e32f5c0538aeb75f50846aa632
-
SSDEEP
1536:cjHxHrInoL5kru2KpO1/Wqcr33u+0PCtUd9yupDEtIKCL:cDxHknoL5Lvp6/W/Du+2MUdUMeCL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e5b32392c5e511cf5e3cd275b03275e
Files
-
3e5b32392c5e511cf5e3cd275b03275e.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.packed Size: - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2x4.qmrp Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xqo01nod Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6xvdg404 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8l.7h576 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
q88k09kx Size: 513B - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE