Static task
static1
Behavioral task
behavioral1
Sample
3f9bf57434b1172dfa6fe8048f0fbcff.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3f9bf57434b1172dfa6fe8048f0fbcff.exe
Resource
win10v2004-20231215-en
General
-
Target
3f9bf57434b1172dfa6fe8048f0fbcff
-
Size
25KB
-
MD5
3f9bf57434b1172dfa6fe8048f0fbcff
-
SHA1
2446efadef02288a695244da80ae252d2c42cd71
-
SHA256
3de3f78c7aa3652d1ad6bc03e382b715d08b0ca60588ef6482fb4c618a9b04fe
-
SHA512
1cc1736af952a6e31893b2859d81bf68dd63616d7e5e559143aa30cda2dc5d5fca076f75e82b984749364df2fcad016a9594f7765a420883d4cbe552ead6cdd8
-
SSDEEP
384:4pl6vV+c4J3FXTWWEQ5BSKUZ0UD7i8NBBrX1zClYs:SyMc+FXTWWf+Z0UD7xBelYs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f9bf57434b1172dfa6fe8048f0fbcff
Files
-
3f9bf57434b1172dfa6fe8048f0fbcff.exe windows:4 windows x86 arch:x86
c119df5541f9eb9977b5e494f1569ae7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord271
ord497
ord250
ord319
ord253
ord766
ord730
ord781
ord364
ord490
ord744
ord775
ord769
ord246
ord370
ord374
ord778
ord461
ord465
ord740
ord714
ord463
ord464
ord397
ord334
ord654
ord361
ord276
ord282
ord729
ord323
ord269
ord321
ord713
ord268
ord350
ord592
ord306
ord704
ord214
ord429
ord686
ord395
ord352
ord289
user32
ord565
ord530
ord136
ord135
ord142
ord543
ord268
ord575
ord86
ord614
ord220
ord10
ord439
ord432
ord178
ord48
ord228
ord494
ord559
ord434
ord128
ord207
ord217
ord365
ord467
ord291
ord379
ord385
ord287
ord375
ord231
ord307
ord403
gdi32
ord424
ord327
ord376
ord324
ord308
advapi32
ord151
ord194
ord182
ord154
ord174
ord160
ord193
shell32
ord328
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 933B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 950B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE