Static task
static1
Behavioral task
behavioral1
Sample
3fd3fd24c4062b35ebab8f893be3c41be54d687dda4236c8f17121dc85a426dcN.exe
Resource
win7-20241023-en
General
-
Target
3fd3fd24c4062b35ebab8f893be3c41be54d687dda4236c8f17121dc85a426dcN.exe
-
Size
1.8MB
-
MD5
d1f6c2083d94c10bf23c7364e0553d90
-
SHA1
73c77c7c0a0e07970cfea13a3032fd214836849c
-
SHA256
3fd3fd24c4062b35ebab8f893be3c41be54d687dda4236c8f17121dc85a426dc
-
SHA512
8d2fc6d97a487ade3d335fcb17d04db3b4850a6f72a09a9dae15522705b1f7e633c86a1820ee8fb67278d9fe7f8d442e5bc28755a69160fb8a6337cc2d4c11fc
-
SSDEEP
49152:jkX0ECGPXmvFaJaNWKCSK75kVmeTUzQAfBcQB29:jM1PGooNx2UvTUzQqi9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fd3fd24c4062b35ebab8f893be3c41be54d687dda4236c8f17121dc85a426dcN.exe
Files
-
3fd3fd24c4062b35ebab8f893be3c41be54d687dda4236c8f17121dc85a426dcN.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 153KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kyqqejaz Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rffdicvy Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE