Static task
static1
Behavioral task
behavioral1
Sample
3f106c301779b6208b42cfd27dcc8151.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3f106c301779b6208b42cfd27dcc8151.exe
Resource
win10v2004-20231215-en
General
-
Target
3f106c301779b6208b42cfd27dcc8151
-
Size
512KB
-
MD5
3f106c301779b6208b42cfd27dcc8151
-
SHA1
8de5f0103beef6a72c02727eb301339f81aa3e39
-
SHA256
f448cca20dbc30b21ba8d88df826bd8e2a2f2c6e3dea929f25dc13773f67678a
-
SHA512
7a33c6b511a8797d11f6f7f784e0a0a1deefa15b5abb60869bea2a66462f42887ac9fa5707c159dee9bb19e39b0f0db2d1ad41c752038fe18e262391c36f1ce0
-
SSDEEP
12288:kZlLuUBDYXS3EP9rtpmH90PyOyXChddM:QPBG1rp00NyXCh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f106c301779b6208b42cfd27dcc8151
Files
-
3f106c301779b6208b42cfd27dcc8151.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.MPRESS1 Size: 492KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE