Static task
static1
Behavioral task
behavioral1
Sample
3f800bb06168c6265f2e70fbe9f41066e53d936da7957caa287ad9e8ddddc758.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3f800bb06168c6265f2e70fbe9f41066e53d936da7957caa287ad9e8ddddc758.exe
Resource
win10v2004-20240802-en
General
-
Target
3f800bb06168c6265f2e70fbe9f41066e53d936da7957caa287ad9e8ddddc758
-
Size
2.2MB
-
MD5
deb67cd3c1f20a8b8ce6d08c5aa1befa
-
SHA1
38996bf31c99c743748d6e28db48a73652a10c44
-
SHA256
3f800bb06168c6265f2e70fbe9f41066e53d936da7957caa287ad9e8ddddc758
-
SHA512
9c5bed241be5f605d381ce3cf3f544ac3c0001df4694ffad61acfaad6a92ea0d8b71d9ea9405df237b6a4ebf7f41325c0ad392aaa536a0947f77c952136ab9bc
-
SSDEEP
12288:58kxNhOZElO5kkWjhD4Ao8kxNhOZElO5kkWjhD4Ao8kxNhOZElO5kkWjhD4Ao8kV:SqEkfFXqEkfFXqEkfFXqEkfF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f800bb06168c6265f2e70fbe9f41066e53d936da7957caa287ad9e8ddddc758
Files
-
3f800bb06168c6265f2e70fbe9f41066e53d936da7957caa287ad9e8ddddc758.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.MPRESS1 Size: 434KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE