Static task
static1
Behavioral task
behavioral1
Sample
3fe406d5fb96318792c6845e824413bd709c776d74b73893af33f277b9350591.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3fe406d5fb96318792c6845e824413bd709c776d74b73893af33f277b9350591.exe
Resource
win10v2004-20240226-en
General
-
Target
3fe406d5fb96318792c6845e824413bd709c776d74b73893af33f277b9350591
-
Size
1.8MB
-
MD5
e3cb6facc34751ef31fbc8e217fbb778
-
SHA1
e51dffd12bc7ff067f55342ece97f67532a681ef
-
SHA256
3fe406d5fb96318792c6845e824413bd709c776d74b73893af33f277b9350591
-
SHA512
0fdeafba6bd819bf38d601f696631a3da0b23ea0dc5fe105215e8f1b830764de6a3305781430e1dcb47d8f9891437e041b60ee0c4af8c3e79375113a8afa5c06
-
SSDEEP
24576:iR5QvG4V6SzMpZsVafX4OSwqgVls6eKWPyEa4r5nDtIq3DlhXGgO+56VsFEPQIoG:iR5/4lzMpZRX47gVlkPR/Cq3D3GgOMj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fe406d5fb96318792c6845e824413bd709c776d74b73893af33f277b9350591
Files
-
3fe406d5fb96318792c6845e824413bd709c776d74b73893af33f277b9350591.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
ANz u8 Size: 879KB - Virtual size: 879KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 923KB - Virtual size: 922KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ