Static task
static1
Behavioral task
behavioral1
Sample
a3cr.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a3cr.exe
Resource
win10v2004-20230220-en
General
-
Target
a3cr.exe
-
Size
270KB
-
MD5
bf4629546843ffc88d9406ed6bc2d5fd
-
SHA1
77d0095513b6fe0cc8de5388492b6aa2ea871929
-
SHA256
53158a43ca64a068cb70e9cdfa74e763c459ea7d806dbcecd27780144a3820aa
-
SHA512
82432dd221a9aa8ecb052fbc14d1d8e61f9bd4de2c11984dedb08fa3603eaa6146deebfd4248aa845c9bbb4f6ba3ab6da902a100688a416cc25debc289706b9a
-
SSDEEP
6144:EMVDs/VZ7lvRllqa+ZksyZXt5zoDqaUBZG/j:lts/tvLQc5zwXwG/j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3cr.exe
Files
-
a3cr.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ