Static task
static1
Behavioral task
behavioral1
Sample
3f54d36432698d95261a39cb3d7821ac.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3f54d36432698d95261a39cb3d7821ac.exe
Resource
win10v2004-20231222-en
General
-
Target
3f54d36432698d95261a39cb3d7821ac
-
Size
214KB
-
MD5
3f54d36432698d95261a39cb3d7821ac
-
SHA1
be09b4cb57f3bb796a0a82d8a90d4dc30e6b55ac
-
SHA256
53a596916b7a8ba8d8566fcc57f5bc13dc5b2b3d19c9bd88741df9282edbb28e
-
SHA512
356e68227973f6b1a295ab5dbb937ce1329f0cc272a80f96175c72b4994ef2dffcc8b8a3bcb0dbf37d224222d75532d0b72cfacadcaf5f86d47b2af6b8a4ec5a
-
SSDEEP
6144:cCDSiEWkd338sbuB913FcKnvkQgpnMt3r:P2iYas6B91VcKngmr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f54d36432698d95261a39cb3d7821ac
Files
-
3f54d36432698d95261a39cb3d7821ac.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE