Static task
static1
Behavioral task
behavioral1
Sample
3e9a480499ba57c2d390520d58226fc7aa8690b9e4e766318b27486e3c12ee00.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3e9a480499ba57c2d390520d58226fc7aa8690b9e4e766318b27486e3c12ee00.exe
Resource
win10v2004-20230221-en
General
-
Target
3e9a480499ba57c2d390520d58226fc7aa8690b9e4e766318b27486e3c12ee00
-
Size
652KB
-
MD5
cccd20642cd86632eb942c895b9402f6
-
SHA1
013e358183b34eefb2cf9079675ca838a94b82b8
-
SHA256
3e9a480499ba57c2d390520d58226fc7aa8690b9e4e766318b27486e3c12ee00
-
SHA512
c96dc38e246dd502d1a19e9618f1d7792dbf5c4d5ef6eb1013d4d949b249ce2a14011d654c0320df355105d33ca57dfdd3fd32b5e848bbd6dda812b53dc8b13d
-
SSDEEP
12288:8RP2B0xTGlxNqvNu2hZ+nUEsn9hxLOoPer//7cL0iCeRDb5PA2xcyu/5G92o2qwd:YPLaVUH999G0ZX/zk5G92o2q6ac
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e9a480499ba57c2d390520d58226fc7aa8690b9e4e766318b27486e3c12ee00
Files
-
3e9a480499ba57c2d390520d58226fc7aa8690b9e4e766318b27486e3c12ee00.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 628KB - Virtual size: 625KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ