Static task
static1
Behavioral task
behavioral1
Sample
3a91ea7a485aa39c0542093fe6c5e859.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3a91ea7a485aa39c0542093fe6c5e859.exe
Resource
win10v2004-20231215-en
General
-
Target
3a91ea7a485aa39c0542093fe6c5e859.exe
-
Size
418KB
-
MD5
3a91ea7a485aa39c0542093fe6c5e859
-
SHA1
fa452b22821706e7fd549acdeddad0560938743f
-
SHA256
4256dbaf8816beed10c4c2b3306bab611f56ff0edef13934b27f4bf1e4c0dd40
-
SHA512
37f4520b72336ef76ee1f4d89f436a2096f251a782fa280486986d9399bcaa8d688ad47a1e3e95bc84118a50820e64f245dbe383caf226c5eecb13ce098af5a6
-
SSDEEP
12288:ILc9udyQ/qBlZOTZLO1DHHwRxVMXDA98CfXgi9QuI:ILCsqBlkRSDHHkxVMXDA98CP3e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a91ea7a485aa39c0542093fe6c5e859.exe
Files
-
3a91ea7a485aa39c0542093fe6c5e859.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 415KB - Virtual size: 415KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ