Static task
static1
Behavioral task
behavioral1
Sample
f3a49d339deffcfe2838807dd4a67c9137c422780ad990d709560b3723215293.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3a49d339deffcfe2838807dd4a67c9137c422780ad990d709560b3723215293.exe
Resource
win10v2004-20240426-en
General
-
Target
f3a49d339deffcfe2838807dd4a67c9137c422780ad990d709560b3723215293
-
Size
14KB
-
MD5
5609c33d31e7be6372eaf60c3262136a
-
SHA1
d3ff09b079762e34e249d936a27149af533d7ef0
-
SHA256
f3a49d339deffcfe2838807dd4a67c9137c422780ad990d709560b3723215293
-
SHA512
6443d7bc19a36f7b154a1d1df41da505ce87b0e4d4fe469435a79d9de715a1e10ffa31ac7b904579ee9c65bc6b728b5dc7a1e208c769e59433c326faf3fdb176
-
SSDEEP
384:30bXA9A48SmRuhoWbuJiMGPQ3frLaDE045HN:30zYIROo0uVGPQjLgA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3a49d339deffcfe2838807dd4a67c9137c422780ad990d709560b3723215293
Files
-
f3a49d339deffcfe2838807dd4a67c9137c422780ad990d709560b3723215293.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ