Static task
static1
Behavioral task
behavioral1
Sample
3f0330e2986a4b265566498cbccce170.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3f0330e2986a4b265566498cbccce170.exe
Resource
win10v2004-20231215-en
General
-
Target
3f0330e2986a4b265566498cbccce170
-
Size
90KB
-
MD5
3f0330e2986a4b265566498cbccce170
-
SHA1
2a5d3e2abea66e977eb74381e4c83223df8e7249
-
SHA256
bba17eb49a003e069a23636380538dc90d2830e83cfb9414d01dd51a4982bb70
-
SHA512
04a8cfc503f7ebdb8be55af81224db0065a7d519feaa9e4e6284a0f2c3b29bb8238639bdba21c7e8fc68c80e6009f04e694aee081bdbaa0a06608d445d5a5c38
-
SSDEEP
1536:lKrlljc/mZmAeEbmNQpMVq0K95ESGBg5uFS5V+r017qBuxA4yQbXHl1OVY:lKdIumANbkQKq005/5rTsYCQbXHP2Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f0330e2986a4b265566498cbccce170
Files
-
3f0330e2986a4b265566498cbccce170.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
jjock Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ax5pgl Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xk8nyvq Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE