Static task
static1
Behavioral task
behavioral1
Sample
3edea9477da3057ab0b53f8c493bd8e2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3edea9477da3057ab0b53f8c493bd8e2.exe
Resource
win10v2004-20231215-en
General
-
Target
3edea9477da3057ab0b53f8c493bd8e2
-
Size
378KB
-
MD5
3edea9477da3057ab0b53f8c493bd8e2
-
SHA1
ed5952aab1677370ce505bd0258ed92435d97f2e
-
SHA256
9458d4ce66f72a97eefdd87757d4fdfbabb79f43fd082283a523b885ce77464f
-
SHA512
95c90da20988b6ed3500e87bb029d01edfbe491de8f3f609d5ab2b4bbd2f9bf00153c823c23509b846d6fd0842557186da845b3f79293e68c013869e9c6d0a95
-
SSDEEP
6144:e9EIzEtXK8Mqsqrr+BZHVAhgrDsN89YgESARHy65U8fV27YFsmQs6jqzGt/pWoSt:eVzEtXh5DaBZHVfsN1gz6G8fVLLQzqzb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3edea9477da3057ab0b53f8c493bd8e2
Files
-
3edea9477da3057ab0b53f8c493bd8e2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
KuNgBiM Size: - Virtual size: 392KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KuNgBiM Size: 371KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KuNgBiM Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE