Static task
static1
Behavioral task
behavioral1
Sample
3eb79af0139b665d5196de377a6c730d309bc11b1ff6a57aff8aca14a1709f45.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3eb79af0139b665d5196de377a6c730d309bc11b1ff6a57aff8aca14a1709f45.exe
Resource
win10v2004-20240426-en
General
-
Target
3eb79af0139b665d5196de377a6c730d309bc11b1ff6a57aff8aca14a1709f45
-
Size
240KB
-
MD5
3527f6c63d0ebe0440e5dc2085f8dfe9
-
SHA1
15f1e520d6c1c1f3bc64edd2dfeba73af53f7197
-
SHA256
3eb79af0139b665d5196de377a6c730d309bc11b1ff6a57aff8aca14a1709f45
-
SHA512
802ada9a42e712d63f406ffeef02bf79f5c83ab61ad1c1b2f7d7decd6fbc2d62cbbd1493946619934d2be2b93be6de0a42abdb06b66e39e568923307c32569f2
-
SSDEEP
6144:2BqNsmrMws+H3Lb+Qw/WYgFIgsh0KXoQr8jTQjewInB9:2A7LKQweY0sam38vZwIB9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3eb79af0139b665d5196de377a6c730d309bc11b1ff6a57aff8aca14a1709f45
Files
-
3eb79af0139b665d5196de377a6c730d309bc11b1ff6a57aff8aca14a1709f45.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ