Static task
static1
Behavioral task
behavioral1
Sample
d3e9c72eb46d38016b8dd09ce15fd5de.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d3e9c72eb46d38016b8dd09ce15fd5de.exe
Resource
win10v2004-20240226-en
General
-
Target
d3e9c72eb46d38016b8dd09ce15fd5de
-
Size
40KB
-
MD5
d3e9c72eb46d38016b8dd09ce15fd5de
-
SHA1
a828ec48e9ff260ee1d75be3bc2cba2679db94e7
-
SHA256
0d682b273951476b0d81df5f973f98e296dad249beab0995d3d0200a0f1a1451
-
SHA512
8e8f91373d57f642bd9627e620a2be2eb2b40cb9cec71ad4bf186507db66090ea291769b32c1f16acf6939430dfd9c88aa794271e5194a1638360cbe51f808ed
-
SSDEEP
384:qHRLxDKNcJuDpz5U/l5rOCeQepBcdsGr4oz8zlbF127uRZXdrl895dE7BYbpvZ3w:qHRL4Dp5GKVQ7GGKzj0mXd4++FAX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3e9c72eb46d38016b8dd09ce15fd5de
Files
-
d3e9c72eb46d38016b8dd09ce15fd5de.exe windows:5 windows x86 arch:x86
b3a3d438cc337614c28109b5fc7574ac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
LoadLibraryA
GetProcessHeap
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
RegOpenKeyA
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wer1 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wer5 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wer8 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wer2 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wer7 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wer3 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wer4 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wer6 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 460B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ