Static task
static1
Behavioral task
behavioral1
Sample
e3ca80ed57642bb3b64e23b9a393df3efee559187de1fac543f54a8fde68f42d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e3ca80ed57642bb3b64e23b9a393df3efee559187de1fac543f54a8fde68f42d.exe
Resource
win10v2004-20230915-en
General
-
Target
e3ca80ed57642bb3b64e23b9a393df3efee559187de1fac543f54a8fde68f42d
-
Size
706KB
-
MD5
cf3ddd7b8322e274fcc224130fd29543
-
SHA1
3e2f1ac1c868838c4a59f6f6bea2067000c0ef41
-
SHA256
e3ca80ed57642bb3b64e23b9a393df3efee559187de1fac543f54a8fde68f42d
-
SHA512
83f7c8c3878bc1f98ce10ea5fe41e8ef5c4a7995fe200783549bea814555b823bea7401abb8f5fc7a2b7c41ee2bcf9d7a4631fc5642bbc9e00576739d2e1e6c4
-
SSDEEP
12288:SEjv7+qaYeiveC8omNZHsyClgmw6z2V7rl:SET7Vw/rzl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e3ca80ed57642bb3b64e23b9a393df3efee559187de1fac543f54a8fde68f42d
Files
-
e3ca80ed57642bb3b64e23b9a393df3efee559187de1fac543f54a8fde68f42d.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.Upack Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE