Static task
static1
Behavioral task
behavioral1
Sample
3fe6a311a1609160a9506e4855bf1cf4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3fe6a311a1609160a9506e4855bf1cf4.exe
Resource
win10v2004-20231215-en
General
-
Target
3fe6a311a1609160a9506e4855bf1cf4
-
Size
128KB
-
MD5
3fe6a311a1609160a9506e4855bf1cf4
-
SHA1
fd838a6251580aa4c2e9f742c7dd530531fb8e42
-
SHA256
61685bf49ea8cc02b27f790314d4eb3c0c3d36f6a77a121696d5e9f101ea1874
-
SHA512
1cf59ba2c7e373ffe7dc3e4b3bac29d71075e0e99053a0c75d0063e304938d99e056748def0b9ef084519d38e4ed30162b502157d0e07f185b4536d7a3f4c632
-
SSDEEP
3072:qeObCoVS4mVb926EhWUxms0fhKZHil8cgWN5CXfASOvvdM:qnbCoVlHjmsI2E8cx22vv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fe6a311a1609160a9506e4855bf1cf4
Files
-
3fe6a311a1609160a9506e4855bf1cf4.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ