Static task
static1
Behavioral task
behavioral1
Sample
3bbe2c4f6a542f8defa3fe81a6a209af76ff676c4e74fb2b63b50c6c2f2f4648.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3bbe2c4f6a542f8defa3fe81a6a209af76ff676c4e74fb2b63b50c6c2f2f4648.exe
Resource
win10v2004-20240426-en
General
-
Target
3bbe2c4f6a542f8defa3fe81a6a209af76ff676c4e74fb2b63b50c6c2f2f4648
-
Size
645KB
-
MD5
1654be9e6ecfb4cc164863c9100ab41c
-
SHA1
32c7e7093a60f91bf6791ca1d0155a0574393242
-
SHA256
3bbe2c4f6a542f8defa3fe81a6a209af76ff676c4e74fb2b63b50c6c2f2f4648
-
SHA512
5eb9d26b4dfd5cc7e16e3e74eba9dcce807dca42ac49c0dbeb71052f6a0d3eb35479269fd3942f109af2717dccd563ce9fe69fd569a86e3d4558cf60cfb775c6
-
SSDEEP
192:xPuTunAtt5Pg1lld07xFVd4yywe/2D4Ec7KdT:tYcAP+PlOzVdNpe/REmi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bbe2c4f6a542f8defa3fe81a6a209af76ff676c4e74fb2b63b50c6c2f2f4648
Files
-
3bbe2c4f6a542f8defa3fe81a6a209af76ff676c4e74fb2b63b50c6c2f2f4648.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ