Static task
static1
Behavioral task
behavioral1
Sample
36adc29a8a31689fa7f316b6cee1375a3a6162f7cff07cc17df6e45db0f92d59.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
36adc29a8a31689fa7f316b6cee1375a3a6162f7cff07cc17df6e45db0f92d59.exe
Resource
win10v2004-20240802-en
General
-
Target
36adc29a8a31689fa7f316b6cee1375a3a6162f7cff07cc17df6e45db0f92d59
-
Size
96KB
-
MD5
4237f10c712f37d1840c633a61302a8d
-
SHA1
fcdb90505f72a1f3c8a5f378f1d49472e184fd59
-
SHA256
36adc29a8a31689fa7f316b6cee1375a3a6162f7cff07cc17df6e45db0f92d59
-
SHA512
5ccec79e4beea39c832e65cb4088fd5e5e561fb4e6359000870ca8bfaca9d792074fe01b80382000af8bb70b9bf8b35ec6740e422ee7100f52362ac942d41d8e
-
SSDEEP
1536:8pQ9PV4+sf4NmOfPH64MterEWcBQCOF+XXd4muVcdZ2JVQBKoC/CKniTCvVAva61:8pQn+4kOHH64Mt5WXCOF+Xt45VqZ2fQ1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36adc29a8a31689fa7f316b6cee1375a3a6162f7cff07cc17df6e45db0f92d59
Files
-
36adc29a8a31689fa7f316b6cee1375a3a6162f7cff07cc17df6e45db0f92d59.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ