Static task
static1
Behavioral task
behavioral1
Sample
3e9fd7c0dbed99f1445b6ce2f1c235e0ec1126dad75c81db29c7b0de8c311bea.exe
Resource
win7-20240221-en
General
-
Target
3e9fd7c0dbed99f1445b6ce2f1c235e0ec1126dad75c81db29c7b0de8c311bea.exe
-
Size
3.0MB
-
MD5
b2c6d3a1570830bfa61350cd9e5ea894
-
SHA1
5c3da17b59822b1fa12d462936678615a34d349e
-
SHA256
3e9fd7c0dbed99f1445b6ce2f1c235e0ec1126dad75c81db29c7b0de8c311bea
-
SHA512
d675788042ad985de1677cb7fde19231d26f226a4cbcffb9c79ee45ebf54f478d0d2eb81101deef7c8e8427bdbab97ec4400ac68b92be9205f162e766ecd15fa
-
SSDEEP
98304:JNzmWqKsRJlncjC0gD5WHg8z7RVo4fI2:JNzmWqLtkgsrfI2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e9fd7c0dbed99f1445b6ce2f1c235e0ec1126dad75c81db29c7b0de8c311bea.exe
Files
-
3e9fd7c0dbed99f1445b6ce2f1c235e0ec1126dad75c81db29c7b0de8c311bea.exe.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 607KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jneqwllw Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qkxqmepb Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE