Static task
static1
Behavioral task
behavioral1
Sample
3ef7871eb2fe17d3e0a5821d1647029f1281bfb268fa4cf3eb9fcb696aa1baaa.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3ef7871eb2fe17d3e0a5821d1647029f1281bfb268fa4cf3eb9fcb696aa1baaa.exe
Resource
win10v2004-20241007-en
General
-
Target
3ef7871eb2fe17d3e0a5821d1647029f1281bfb268fa4cf3eb9fcb696aa1baaa
-
Size
72KB
-
MD5
adcd5b53e7bbf1b9d29eb74711bf7e40
-
SHA1
636d582a6f93d8171931ed70deb5d26025b5ed37
-
SHA256
3ef7871eb2fe17d3e0a5821d1647029f1281bfb268fa4cf3eb9fcb696aa1baaa
-
SHA512
5a0104305b3121343d5162d9a4659b3b25cf1a9dd11cc4db2e5c3f42d9e87d835118d124566f41d25dd802f9a0409a2d4ff3aee2132fea056c77f0f89cf82a91
-
SSDEEP
768:SGgXtC2uhnKrBP0oAfLFYvN/mYq73BWNn3PkBlhaNfjnVrxtZI/1H58AU9UiEb/Q:sN4nSHKGAlhatjnVdOgPgUN3QivEtA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ef7871eb2fe17d3e0a5821d1647029f1281bfb268fa4cf3eb9fcb696aa1baaa
Files
-
3ef7871eb2fe17d3e0a5821d1647029f1281bfb268fa4cf3eb9fcb696aa1baaa.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ