Static task
static1
Behavioral task
behavioral1
Sample
36497d74a511934f2db00ea185e98cede0239e834995d0fd14c57a520eb6c2a6.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
36497d74a511934f2db00ea185e98cede0239e834995d0fd14c57a520eb6c2a6.exe
Resource
win10v2004-20240802-en
General
-
Target
36497d74a511934f2db00ea185e98cede0239e834995d0fd14c57a520eb6c2a6
-
Size
64KB
-
MD5
5037fd9862c7a033e5b4be5574a7c271
-
SHA1
b94b5de541f28b0c85dfcfffaefb44ae70a79b51
-
SHA256
36497d74a511934f2db00ea185e98cede0239e834995d0fd14c57a520eb6c2a6
-
SHA512
916448be7158d74c71fc2ea8134dc6e7c803af55e3746dd6b5a1e9e25533d1963392bf70f393423dfc23071621fa993c65ba5a085f18d2f6846bc81baa4c6075
-
SSDEEP
768:1qTLGvW0N5ryu3pM8Snn8CVhDUbjw06D+sPqNBavZeZ/1H5HQXdnhgoEqErtE1oW:UTYW0FS8+JDN2BAZU1iV1iL+iALMH6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36497d74a511934f2db00ea185e98cede0239e834995d0fd14c57a520eb6c2a6
Files
-
36497d74a511934f2db00ea185e98cede0239e834995d0fd14c57a520eb6c2a6.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ