Static task
static1
Behavioral task
behavioral1
Sample
a3a6bfe5a3988d524fafea932f3c02cefb58c149a99900ff9bde8c4c9f317723.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a3a6bfe5a3988d524fafea932f3c02cefb58c149a99900ff9bde8c4c9f317723.exe
Resource
win10v2004-20240412-en
General
-
Target
a3a6bfe5a3988d524fafea932f3c02cefb58c149a99900ff9bde8c4c9f317723.exe
-
Size
749KB
-
MD5
0f161f314a88dcf290e67101001aa385
-
SHA1
40800bed624d2ebde133a23b6d121d498974e42a
-
SHA256
a3a6bfe5a3988d524fafea932f3c02cefb58c149a99900ff9bde8c4c9f317723
-
SHA512
c6d119c2aa41eac5a3c21d1d5c8fbd584dd46cb4eb2571af86298d0e921d2404f3d25016cb2288bda5f594c459ec6962228bf9a6334135ad14472985ae63dbf9
-
SSDEEP
12288:EvWmNBM9IIHWKFNrLftulRLl0+RfK8Sy4vX0z4GUTu6FXy3vmZ:DmNi9IZKFVftulc8liX0z4NjFuu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3a6bfe5a3988d524fafea932f3c02cefb58c149a99900ff9bde8c4c9f317723.exe
Files
-
a3a6bfe5a3988d524fafea932f3c02cefb58c149a99900ff9bde8c4c9f317723.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 698KB - Virtual size: 697KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ