Static task
static1
Behavioral task
behavioral1
Sample
3b00e6412ed8668cbe96b0664e4b0be0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3b00e6412ed8668cbe96b0664e4b0be0N.exe
Resource
win10v2004-20240802-en
General
-
Target
3b00e6412ed8668cbe96b0664e4b0be0N.exe
-
Size
52KB
-
MD5
3b00e6412ed8668cbe96b0664e4b0be0
-
SHA1
2018060551bc647458b8b593234292ed99f4f5fd
-
SHA256
ed57dd606cc69a26582e5111a544db06efc2a2d7a8dfca48a627b209b157df0e
-
SHA512
2448f56de6466ee8bd0618447a5c6f8449b4e6e7b6f765601727f7fb4066ad1e946a64c77f5e879c2988dcd29526074fb73bf4f3066a37049db71aede2b5c5cb
-
SSDEEP
768:qGTjsjqBgPQ3oS1ZiQGgenbtubVzamvb819TZBaxEZbz6/1H5F/srzMABvKWe:ZT4jY51Z8genIR+mvbc91B9KuMAdKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b00e6412ed8668cbe96b0664e4b0be0N.exe
Files
-
3b00e6412ed8668cbe96b0664e4b0be0N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ