Static task
static1
Behavioral task
behavioral1
Sample
3fc98e0ea546641cbe9d72a4d0722d4b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3fc98e0ea546641cbe9d72a4d0722d4b.exe
Resource
win10v2004-20231215-en
General
-
Target
3fc98e0ea546641cbe9d72a4d0722d4b
-
Size
105KB
-
MD5
3fc98e0ea546641cbe9d72a4d0722d4b
-
SHA1
f13b01b9b5c95f68fc142136a06b15c7a0e962ce
-
SHA256
5284b0564e584a46a2ef64bbd98e677403a7f962ae1b1952780b9dc69d5e5f15
-
SHA512
44a08f0813eb29784deb1fa2b3ee29953594a4185ee4dc6b2bd5d2247f9548a8b42f2b55d5d1389f9c9f6421b02d372cd37ab28c2a400266bad4e058e3135c67
-
SSDEEP
1536:6ewZnxbj25f+rPfK5kL9EhuVshhyXT5YXRtqcspaDwx1Do:DwBxbCB+DR9RV35YXRnspIG1Do
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fc98e0ea546641cbe9d72a4d0722d4b
Files
-
3fc98e0ea546641cbe9d72a4d0722d4b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 74KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE