Static task
static1
Behavioral task
behavioral1
Sample
436149b3d08b9c52e49a9e0984c7e831.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
436149b3d08b9c52e49a9e0984c7e831.exe
Resource
win10v2004-20231215-en
General
-
Target
436149b3d08b9c52e49a9e0984c7e831
-
Size
120KB
-
MD5
436149b3d08b9c52e49a9e0984c7e831
-
SHA1
2a3884010fa0198f7efd7aa5e6b1048642a144e5
-
SHA256
9e8284cb98e48967946255d32263bfe213f7655aa16029eeb8d226693aa3159c
-
SHA512
ffaa39450c22a609e306567b36a30c372c2410c32668f44b7383a77c1ec4328d2d384db21c59024d8540147d549e68adcca1e5524cd3da5c7da2c4642746172f
-
SSDEEP
3072:V9r2PUMH93aqslZhn98isYz0nDSZ6HkH1/vo9UlpKWydXzUBbI:vr2cMH93eLOisYz0S6yVo9qpKWkXzUBc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 436149b3d08b9c52e49a9e0984c7e831
Files
-
436149b3d08b9c52e49a9e0984c7e831.exe windows:5 windows x86 arch:x86
c52ea0246626373647a8dae4d7de22f8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawIcon
GetMessageW
kernel32
GetLogicalDrives
Sections
.lsnud Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.luden Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wxqp Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ