Static task
static1
Behavioral task
behavioral1
Sample
3815bc3a78dc96a0af4aca4446b3afa741d3910530ae69b06895b0e499d49aa6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3815bc3a78dc96a0af4aca4446b3afa741d3910530ae69b06895b0e499d49aa6.exe
Resource
win10v2004-20240412-en
General
-
Target
3815bc3a78dc96a0af4aca4446b3afa741d3910530ae69b06895b0e499d49aa6.exe
-
Size
684KB
-
MD5
9a6474186b145552217cf4d421309733
-
SHA1
b21733889432abe65233736ce0e0289f8f3bddc4
-
SHA256
3815bc3a78dc96a0af4aca4446b3afa741d3910530ae69b06895b0e499d49aa6
-
SHA512
33f247c4ef21221d983927b7f2f54a63d51d23840bfb4edfb9aac32f8a2b6856566c78c00e3ce147e574b1b61526f16c2c7f818f4a291d006183be6e73b7b416
-
SSDEEP
12288:urfrr2rrDirIlL3zxlDB3gHSmlNyqrCysnM8f/zR0NIV8ngQItKxKQCHrdWnuS:5lL3zxlD5aTl0VpM4/F0NA8ngQPird8X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3815bc3a78dc96a0af4aca4446b3afa741d3910530ae69b06895b0e499d49aa6.exe
Files
-
3815bc3a78dc96a0af4aca4446b3afa741d3910530ae69b06895b0e499d49aa6.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 678KB - Virtual size: 677KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ