Static task
static1
Behavioral task
behavioral1
Sample
3e71123221f71d2f3292dda9e2dcab80N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e71123221f71d2f3292dda9e2dcab80N.exe
Resource
win10v2004-20240709-en
General
-
Target
3e71123221f71d2f3292dda9e2dcab80N.exe
-
Size
1.7MB
-
MD5
3e71123221f71d2f3292dda9e2dcab80
-
SHA1
536721111879aab9fa8335aa90a506348dbf7ef6
-
SHA256
663399f5bbc9f750771ac3fcd3b5a326b303f1635a695bd559855d699b3e7d0b
-
SHA512
d4e70a9bd93b4088abd0d3dcaeff492bba5f921fae7d2e9698bb707a4cef4b15cc226bdfafa125d4248cac0311c770c5f4629e601eab32144831df9320144014
-
SSDEEP
49152:YBUyoQdHqPCUtx0jSXTPrCmBr57Ju7LE4Wd/bVwPMg:SUAnUnMSXv1Juk4WppwPR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e71123221f71d2f3292dda9e2dcab80N.exe
Files
-
3e71123221f71d2f3292dda9e2dcab80N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.xpjgw Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE