Static task
static1
Behavioral task
behavioral1
Sample
3fabbf4e8f705ecf81b1c2baf5640c20.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3fabbf4e8f705ecf81b1c2baf5640c20.exe
Resource
win10v2004-20231215-en
General
-
Target
3fabbf4e8f705ecf81b1c2baf5640c20
-
Size
72KB
-
MD5
3fabbf4e8f705ecf81b1c2baf5640c20
-
SHA1
2e112d75e5a0ce85f5f78dfaf9f97ef7151eaba5
-
SHA256
0047f31587a91889eced13907f57390c6056135c72576977dbcc0029bbf3a667
-
SHA512
fbf25176ae3b2f19c07ff37b1b744a62de04c0a7d43cac396a508d1334ed76d500981c48bbab792fbac85107d39aa411fd42493e17895663ab209cd41c328ed8
-
SSDEEP
1536:iAfV6Z9/7SLlTpEkj0BZmgYKqhVR8fnG5By9SH05huyKlX:iJDSLlt7EFG5cs054yQX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fabbf4e8f705ecf81b1c2baf5640c20
Files
-
3fabbf4e8f705ecf81b1c2baf5640c20.exe windows:4 windows x86 arch:x86
c21317252f1393c3979c18e372af4445
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
wsprintfA
advapi32
RegCloseKey
shlwapi
SHDeleteKeyA
msvcrt
atoi
Sections
.31337 Size: - Virtual size: 44KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.31337 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE