Static task
static1
Behavioral task
behavioral1
Sample
3f1b96f32f5a316b72d7149f4c40f636.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3f1b96f32f5a316b72d7149f4c40f636.exe
Resource
win10v2004-20231222-en
General
-
Target
3f1b96f32f5a316b72d7149f4c40f636
-
Size
101KB
-
MD5
3f1b96f32f5a316b72d7149f4c40f636
-
SHA1
ed8dcc22c546b5561815219782df244616d2e88c
-
SHA256
b06e6d076ea78955a7ea7a849ce47d69ba7d3b0a4976637672cab9218637c557
-
SHA512
77e69e51c43bb12eff947a2b962a35bceee8c9b0b57868d61a5abab127f992d694860ad8ce70b02e63a669555aadb5ac0df539ec0a0694487a8de1852c146baa
-
SSDEEP
3072:fITr+SbCIEgxRdnIXt3MkuQquRtmZ9kM0IYc:fITr+RXgBId8gquPmZ9kz0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f1b96f32f5a316b72d7149f4c40f636
Files
-
3f1b96f32f5a316b72d7149f4c40f636.exe windows:4 windows x86 arch:x86
148bf55ceb3e5471ef5f9ffc2bb75e2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.XComp0 Size: 98KB - Virtual size: 896KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XComp Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE