Static task
static1
Behavioral task
behavioral1
Sample
3e61dae5a414538e98b25092789d9eb6a05328816166bc3f199af29090d8b1d1.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3e61dae5a414538e98b25092789d9eb6a05328816166bc3f199af29090d8b1d1.exe
Resource
win10v2004-20240802-en
General
-
Target
3e61dae5a414538e98b25092789d9eb6a05328816166bc3f199af29090d8b1d1
-
Size
320KB
-
MD5
0b6c12fb4d6e078aaa33cdb2a594fd58
-
SHA1
a3af3d9619006f63812ec3f2db182e8c52986071
-
SHA256
3e61dae5a414538e98b25092789d9eb6a05328816166bc3f199af29090d8b1d1
-
SHA512
1f99a758b0df6d4b30f248c52e9eac4a27838abab45c0e1f26712913a67b68d2e3273a8d35384300db7bb52d8ebf207c27371d6e1816b009d272b2af35607e1f
-
SSDEEP
3072:w7TQlatyYePxiFVJ7TQlatyYePxiFVl7TQlatyYePxiFVL7TQlatyYePxiFVB7TJ:yTQt8JTQt8VTQt8vTQt8RTQt8XTQtY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e61dae5a414538e98b25092789d9eb6a05328816166bc3f199af29090d8b1d1
Files
-
3e61dae5a414538e98b25092789d9eb6a05328816166bc3f199af29090d8b1d1.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 39KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE