Static task
static1
Behavioral task
behavioral1
Sample
3c47aa3ff683567d9e7ad5ce24556bca9a8d02df6a5f992b5a51f139888abf6b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3c47aa3ff683567d9e7ad5ce24556bca9a8d02df6a5f992b5a51f139888abf6b.exe
Resource
win10v2004-20231215-en
General
-
Target
3c47aa3ff683567d9e7ad5ce24556bca9a8d02df6a5f992b5a51f139888abf6b
-
Size
945KB
-
MD5
e9379c68dc1230ce54b784b818325efc
-
SHA1
701ed521c2681c09284089705202572e9a268d26
-
SHA256
3c47aa3ff683567d9e7ad5ce24556bca9a8d02df6a5f992b5a51f139888abf6b
-
SHA512
d26dc847368b2f797e812720663e9c93f653bbcd8de228734f6256c069d6912fd35bc3fa81581a8c68ba8f42f45396dffb5e95c106adeac5ea5cea7fec25270e
-
SSDEEP
12288:qStiOsTuSEVg2OVZZvOI1TxPT/g3e9SDfbq1KzZvT7Ok7mTuMNDqUOwKP7r9r/+l:FLcl7vD9ysSLb8IvT7Ok74uMNDCF1q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c47aa3ff683567d9e7ad5ce24556bca9a8d02df6a5f992b5a51f139888abf6b
Files
-
3c47aa3ff683567d9e7ad5ce24556bca9a8d02df6a5f992b5a51f139888abf6b.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 731KB - Virtual size: 731KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ