Static task
static1
Behavioral task
behavioral1
Sample
3f4ebdba959daf819edb34d04df8608d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3f4ebdba959daf819edb34d04df8608d.exe
Resource
win10v2004-20231222-en
General
-
Target
3f4ebdba959daf819edb34d04df8608d
-
Size
384KB
-
MD5
3f4ebdba959daf819edb34d04df8608d
-
SHA1
04ed544482e22ea3c437454280533039c9d0aabe
-
SHA256
4d45d97d3869a1c8dbfbf09bacb2f7069b9e4a42d7b7133740b654ca2be9a952
-
SHA512
367ebea4b9447441c52327294161a93f32965e9ff5f92beaebca82ca2cf1d15163ed7cfcea71133c051b09d3a224dbcbd8cf66526323ad85607c3270314945bf
-
SSDEEP
6144:/OQmWNaoguoVgy40xSlqT2T1wS12l9I1bGd7S0qslVmR:TmWNeuoVgy4+ga2TpEl8bO7S0n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f4ebdba959daf819edb34d04df8608d
Files
-
3f4ebdba959daf819edb34d04df8608d.exe windows:5 windows
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 351KB - Virtual size: 351KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.mackt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE