Static task
static1
Behavioral task
behavioral1
Sample
3b4b5205831d94bb1975627f70e52acfbe84464cd38263eeb6a60de2582c5efdN.exe
Resource
win7-20241010-en
General
-
Target
3b4b5205831d94bb1975627f70e52acfbe84464cd38263eeb6a60de2582c5efdN
-
Size
574KB
-
MD5
5d2a655b4568181ed1944d5a7259e540
-
SHA1
d3f1b3f94a6dea9075a03811f222e7ad9b377bd2
-
SHA256
3b4b5205831d94bb1975627f70e52acfbe84464cd38263eeb6a60de2582c5efd
-
SHA512
9b31267129ce95265215b96080dd81709faea2cda61d258cadb63048f14d1b0ef6a9e5fcbe375b5bd63c49882ce26cc1e77ac2227e6d6aaab54585435da1fa16
-
SSDEEP
12288:zCyEHAWAdljmJqkC3xMX85FSR2f9A08NIX+Vjwd4G/3z1ET4m3Hdsubv:zFhWAfn22m0eD1GPz8HdxL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 3b4b5205831d94bb1975627f70e52acfbe84464cd38263eeb6a60de2582c5efdN
Files
-
3b4b5205831d94bb1975627f70e52acfbe84464cd38263eeb6a60de2582c5efdN.exe windows:4 windows x86 arch:x86
0df34c1618dab2825fbeac9ca290dcb5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvbvm60
ord697
Sections
.MPRESS1 Size: 568KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE