Static task
static1
Behavioral task
behavioral1
Sample
d3489320cc67dd36e6cbf32f396e689c.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d3489320cc67dd36e6cbf32f396e689c.exe
Resource
win10v2004-20240226-en
General
-
Target
d3489320cc67dd36e6cbf32f396e689c
-
Size
123KB
-
MD5
d3489320cc67dd36e6cbf32f396e689c
-
SHA1
a5e9bb3ffdbd04d6351e8cfbaab966b3dd158110
-
SHA256
71db88bac4872a711d532005397d34b07d8fc7f3839f4555fc453e8ac5544c35
-
SHA512
3e1940c0e4f3f72bc555ff828caed2a553e01b74044ff58e7c3fcb32d73c3d5c862abd652fd4fffbee069343b7163fc229033339129043a10e6a8d27141c29cc
-
SSDEEP
3072:V6A1hc3Y0Wrp3WcCcXJsr/vp6WtQSP733RKbTxj6UcwpWG:VZ0Y0Wlic5ovp6WmSPr3cP7D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3489320cc67dd36e6cbf32f396e689c
Files
-
d3489320cc67dd36e6cbf32f396e689c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE