Static task
static1
Behavioral task
behavioral1
Sample
e3c628afe7d88b77e6aca9f99ad0739fe6a7c94f331d53f52ea1f627221700d0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
e3c628afe7d88b77e6aca9f99ad0739fe6a7c94f331d53f52ea1f627221700d0.exe
Resource
win10v2004-20231023-en
General
-
Target
e3c628afe7d88b77e6aca9f99ad0739fe6a7c94f331d53f52ea1f627221700d0
-
Size
704KB
-
MD5
13167fd6a7dd4b2bee74ad976218515a
-
SHA1
91a520c84f68ecdc02471d6167c4f6a3a094b637
-
SHA256
be206856c55b9b468e02004f117002e008035133f1b9f54913d80aa030c49159
-
SHA512
bdc21c5e3644b966506f0a342100456217e88adb1b789f9a8599ace680d7faaf93ed47f712ee73b2490e79bcf89702d924f498a018caa543e3be0343dd06b4d9
-
SSDEEP
12288:pY3ua/tGY6ZiNkFr/G3sHDflWWW+xpl7UFcuhZAYurH/KfgGB02ZgA8O1+XlK4s:O37Qi6r/6wD9xpyFxhZTubMrXZgAPAXQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e3c628afe7d88b77e6aca9f99ad0739fe6a7c94f331d53f52ea1f627221700d0
Files
-
e3c628afe7d88b77e6aca9f99ad0739fe6a7c94f331d53f52ea1f627221700d0.zip
-
e3c628afe7d88b77e6aca9f99ad0739fe6a7c94f331d53f52ea1f627221700d0.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 895KB - Virtual size: 895KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ