Static task
static1
Behavioral task
behavioral1
Sample
3cff751076551f01d3dcd168f725201195710047c76718c1ea31a7287258b9f5.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3cff751076551f01d3dcd168f725201195710047c76718c1ea31a7287258b9f5.exe
Resource
win10v2004-20230915-en
General
-
Target
3cff751076551f01d3dcd168f725201195710047c76718c1ea31a7287258b9f5
-
Size
3.9MB
-
MD5
e1d04e613af87f4e8b65fcc4e998c5ca
-
SHA1
e68664e60c7ba1e858c36fb6dfc093a339d25d9a
-
SHA256
3cff751076551f01d3dcd168f725201195710047c76718c1ea31a7287258b9f5
-
SHA512
b644401d764093bbd94280ae3497d9a13a17ea021728b74b8f6965972bda72aa1db907321ad6b6ae2637dca958b561b476eff1cabc0f47d62af66a38fbbd1f62
-
SSDEEP
98304:rJyq4yevxZUbR2zEysXbMU7Vujy35IveSJ9wba:rJ6yep8vTu0S3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cff751076551f01d3dcd168f725201195710047c76718c1ea31a7287258b9f5
Files
-
3cff751076551f01d3dcd168f725201195710047c76718c1ea31a7287258b9f5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE