Static task
static1
Behavioral task
behavioral1
Sample
3f4a84b971da2d96da930de5daf59965.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3f4a84b971da2d96da930de5daf59965.exe
Resource
win10v2004-20231215-en
General
-
Target
3f4a84b971da2d96da930de5daf59965
-
Size
68KB
-
MD5
3f4a84b971da2d96da930de5daf59965
-
SHA1
e6ec3547141bc160cc2e8ca84c5b5f87494bbdc8
-
SHA256
65953e93127ed6263783e2f28ef21f435da819c8be7219c2016445ab55bca1e0
-
SHA512
9235969cc9506efcbfc8e1620fc387193be838766ffad2307fa65e31772a3d7da3852b1716b2e4c457475d44ce4716bb8683ddbcf0263b4aac918318975b3159
-
SSDEEP
768:VezMfZ6K/l1oOR8k1ZPZFX/ZJlOrse6w:VUwLlmOXZbXxzR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f4a84b971da2d96da930de5daf59965
Files
-
3f4a84b971da2d96da930de5daf59965.exe windows:5 windows x86 arch:x86
9b7a43a087508c23068e9d3b34fd3b41
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetStartupInfoA
GetProcAddress
LoadLibraryA
GetProcessHeap
VirtualAlloc
advapi32
RegOpenKeyA
RegCloseKey
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xet1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xet5 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xet2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xet7 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xet3 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xet4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xet6 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ