Static task
static1
Behavioral task
behavioral1
Sample
b3f13a4bf9a74188f8f52aa68eddd1b50737ee84b05b771a2bf20d5116e20516.exe
Resource
win7-20240708-en
General
-
Target
b3f13a4bf9a74188f8f52aa68eddd1b50737ee84b05b771a2bf20d5116e20516
-
Size
2.7MB
-
MD5
a524322ba190430b35f161cb51fcae44
-
SHA1
f5c4d6956023592cd095f8fd9fe612f3ee569b1d
-
SHA256
b3f13a4bf9a74188f8f52aa68eddd1b50737ee84b05b771a2bf20d5116e20516
-
SHA512
cb25de5d58898e4d4ecd2c674d113faa841810ab3eb5d29b0cf99e6df3d8fd6e5564c7fc48d2fd8868338cc1d5fe6aeff887779a25fb5e7003ccc66b1c9febb8
-
SSDEEP
49152:xNlEky/AQ4B55lcw6EEQOT9PJiqjgSst0RqtvtJTwAIUIx3ube/V+P:XuX/747ceEQORPpgS8lRDIjkb2V+P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3f13a4bf9a74188f8f52aa68eddd1b50737ee84b05b771a2bf20d5116e20516
Files
-
b3f13a4bf9a74188f8f52aa68eddd1b50737ee84b05b771a2bf20d5116e20516.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.2MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 319KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
txvfwysg Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ofsyqzdi Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE