Static task
static1
Behavioral task
behavioral1
Sample
3fdce0dec8929f090c4b064b05cb109a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3fdce0dec8929f090c4b064b05cb109a.exe
Resource
win10v2004-20231215-en
General
-
Target
3fdce0dec8929f090c4b064b05cb109a
-
Size
598KB
-
MD5
3fdce0dec8929f090c4b064b05cb109a
-
SHA1
3ba16528e87bbca02a7397085994bf6b8a0bfb21
-
SHA256
8d8a843b2b27b0cce4fb63f5ad462121462a783c964243b9a2cd299ff7a474fa
-
SHA512
55b4b0b68aedddd2f0c373e035e2c713d4b3ea2a6f719b2b8cd17866e80e2d240e404fc26bea4956fa509f0f694d9416f833a4f7be4c695b9c380ab5685a9815
-
SSDEEP
12288:5sDzoi8HArrmkh9jyTZighw1K5OulWi/bqrMkwW9d5ug:S0kh9j+igt9bKMkX9d5P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fdce0dec8929f090c4b064b05cb109a
Files
-
3fdce0dec8929f090c4b064b05cb109a.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 441KB - Virtual size: 441KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ