Static task
static1
Behavioral task
behavioral1
Sample
d3b6e366a802b7cd639108f9d4b36588736bcc77a32ee9796ad42ec294af2e46.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d3b6e366a802b7cd639108f9d4b36588736bcc77a32ee9796ad42ec294af2e46.exe
Resource
win10v2004-20240412-en
General
-
Target
d3b6e366a802b7cd639108f9d4b36588736bcc77a32ee9796ad42ec294af2e46.exe
-
Size
780KB
-
MD5
2a2ed9370aa0109709a8ee808b97733a
-
SHA1
6e864b406ac0ccc30255410568fbb415b781704a
-
SHA256
d3b6e366a802b7cd639108f9d4b36588736bcc77a32ee9796ad42ec294af2e46
-
SHA512
51ea4e087f33dfe1c5a672bf4732bd58b5f6f5d989a6e89847ae79ddcecb4b42515371e3158ed3a28e9058fc4f24fad4782e9ad822a330aa984395a75ab5d8db
-
SSDEEP
12288:WUnhF9WMn7VKqyX2F+2SrFJAaX6m5CVMfbgSaBLQqdydwh65IjHIk58SfFjr3x2Z:WUh2Mn7yXx57PfUlBLbd+wulS9jzIZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3b6e366a802b7cd639108f9d4b36588736bcc77a32ee9796ad42ec294af2e46.exe
Files
-
d3b6e366a802b7cd639108f9d4b36588736bcc77a32ee9796ad42ec294af2e46.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 710KB - Virtual size: 709KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 66KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ