Static task
static1
Behavioral task
behavioral1
Sample
3f8865613b4aec2dab5388f4e4676882.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3f8865613b4aec2dab5388f4e4676882.exe
Resource
win10v2004-20231222-en
General
-
Target
3f8865613b4aec2dab5388f4e4676882
-
Size
451KB
-
MD5
3f8865613b4aec2dab5388f4e4676882
-
SHA1
e74f798128251d5d4484c83e54e68deec3d6ef2e
-
SHA256
7b90e51f5cb7828779c97681d5879c54e5e93bcad9bfac34d17efc6a8efab38a
-
SHA512
e5a723aa1b501074ad2419fa70629b852ab470e7f32243f91f408d38c1b6638cc137395a4b9b4ede084b638e4ace58f8f89633fd0116e2ac97df47cd1694fe99
-
SSDEEP
12288:tYMEGdAYnaa+SSOlE1NdNAgv4MOb4bIzRsTXfXCMOW:iAAYnBxBE1NdOgvwbGIzRsTXqMh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f8865613b4aec2dab5388f4e4676882
Files
-
3f8865613b4aec2dab5388f4e4676882.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 383KB - Virtual size: 382KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 4080.0MB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 19KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 52B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ