Static task
static1
Behavioral task
behavioral1
Sample
3fc13ded916f9f54f25ea04066a35a96.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3fc13ded916f9f54f25ea04066a35a96.exe
Resource
win10v2004-20231222-en
General
-
Target
3fc13ded916f9f54f25ea04066a35a96
-
Size
1.6MB
-
MD5
3fc13ded916f9f54f25ea04066a35a96
-
SHA1
26372ee30c9783a19caccce09b97f84a2aa9a1db
-
SHA256
b612c35a0a007fa31ec079a2d42bb5986d9af63d9e5230949286f113caab35d2
-
SHA512
144ff6635a698e8cc34b15ea073c0587ba9586673d2e7268bbd6d02bedf15915aa5993ecaf8aa7be186fcdd866b4f1051f2d2110d8987794712b624874888a8b
-
SSDEEP
49152:8XhrrNDS5lSAXhrrNDS5lSAXhrrNDS5lSAXhrrNDS5lS:8BNDS5lSABNDS5lSABNDS5lSABNDS5lS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fc13ded916f9f54f25ea04066a35a96
Files
-
3fc13ded916f9f54f25ea04066a35a96.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 325B - Virtual size: 325B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ