Static task
static1
Behavioral task
behavioral1
Sample
3f4f300e2ad8b1bd28204c7c0d2a4be21bb2305013ffaf459b204a6b32b9be99.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3f4f300e2ad8b1bd28204c7c0d2a4be21bb2305013ffaf459b204a6b32b9be99.exe
Resource
win10v2004-20240508-en
General
-
Target
3f4f300e2ad8b1bd28204c7c0d2a4be21bb2305013ffaf459b204a6b32b9be99.exe
-
Size
119KB
-
MD5
0073e811abb37318013d88c9d5446e5c
-
SHA1
b9061544d39d60e9e8e3f3a5b55111e85d6c93f7
-
SHA256
3f4f300e2ad8b1bd28204c7c0d2a4be21bb2305013ffaf459b204a6b32b9be99
-
SHA512
a081523e6084e9ce67874a230a2c048fe0e8dbfdeee77bb8b8db6d89bbdac27156635872c653c17f83961f6b3156092927567026ba5d41d6554679c2496efc45
-
SSDEEP
384:Emjw/SoQzbZlKp6yTcKnwYQFITaxV+avOUrIL+330jaYtL5oNEASAFxG/yD494Jw:E+LbqpHwmMREo0jaf6sFSyD5rh2Tt
Malware Config
Signatures
Files
-
3f4f300e2ad8b1bd28204c7c0d2a4be21bb2305013ffaf459b204a6b32b9be99.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
33:00:03:e2:cd:10:66:ad:8d:b8:1c:06:08:00:00:00:03:e2:cdCertificate
IssuerCN=Microsoft Azure RSA TLS Issuing CA 07,O=Microsoft Corporation,C=USNot Before14-09-2023 17:24Not After08-09-2024 17:24SubjectCN=www.microsoft.com,O=Microsoft Corporation,L=Redmond,ST=WA,C=USdb:27:e0:d1:78:6b:bf:59:d5:37:c9:44:ba:cf:60:3b:96:8d:96:1c:f2:c1:69:39:92:8f:5c:d0:1c:fd:c6:dbSigner
Actual PE Digestdb:27:e0:d1:78:6b:bf:59:d5:37:c9:44:ba:cf:60:3b:96:8d:96:1c:f2:c1:69:39:92:8f:5c:d0:1c:fd:c6:dbDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ