Static task
static1
Behavioral task
behavioral1
Sample
3a56d3836e57abda02f9364285cb813b77a780198b32dad0220e39aac3873e0a.exe
Resource
win7-20240220-en
General
-
Target
3a56d3836e57abda02f9364285cb813b77a780198b32dad0220e39aac3873e0a
-
Size
321KB
-
MD5
68507d55c249d61d7aac50987cd13b08
-
SHA1
075e886e5f43dcc2596964041b8ba669ddb73cee
-
SHA256
3a56d3836e57abda02f9364285cb813b77a780198b32dad0220e39aac3873e0a
-
SHA512
872d4dbb24ec163e7d4f6143b18cfb3527e0b8203294907cd672810c227d789dcb0dc2bd6271161c4bc8191b72c6dffbe937864f2f3d000020d3e6f072b4e073
-
SSDEEP
6144:YRclEhSDYNRIu1dQREqjoEv8i/FuXox3+i+Lj2et3uopGYX:YRcISsNnWEmQox3+i+Ljrt+lYX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a56d3836e57abda02f9364285cb813b77a780198b32dad0220e39aac3873e0a
Files
-
3a56d3836e57abda02f9364285cb813b77a780198b32dad0220e39aac3873e0a.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 269KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE