Static task
static1
Behavioral task
behavioral1
Sample
3fdf3422e1b73f087f3f02216b258e9816709786a8e639a21a2d7b0f9118092b.exe
Resource
win7-20240903-en
General
-
Target
3fdf3422e1b73f087f3f02216b258e9816709786a8e639a21a2d7b0f9118092b
-
Size
5.0MB
-
MD5
0c7c00ca271f7515cec3422471b4dc1d
-
SHA1
c5370ab49e18b77a7cad15810bf6753b4a86800c
-
SHA256
3fdf3422e1b73f087f3f02216b258e9816709786a8e639a21a2d7b0f9118092b
-
SHA512
9fc0db1b6758dcc041a8e90328a476f3932abfceadad21dc979b4377fc49a204042d74e8bc1e6b3eaa86611fd566cea6baad214e6717f7be12ec22fbec8cd293
-
SSDEEP
49152:tFcdrrX+hk6rGgsmDPAZcIVRKkfvTz/zgxYTtcJhwcWcw+:iHkk6rhPD4/RNkxYxf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fdf3422e1b73f087f3f02216b258e9816709786a8e639a21a2d7b0f9118092b
Files
-
3fdf3422e1b73f087f3f02216b258e9816709786a8e639a21a2d7b0f9118092b.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ehdngvkx Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jjxronvg Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE