Static task
static1
Behavioral task
behavioral1
Sample
3ca03512d729da8ca6ee828de9bf2926.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
3ca03512d729da8ca6ee828de9bf2926.exe
Resource
win10v2004-20231215-en
General
-
Target
3ca03512d729da8ca6ee828de9bf2926
-
Size
41KB
-
MD5
3ca03512d729da8ca6ee828de9bf2926
-
SHA1
5833e25d416244c435de10ee4d1f06640b9ca3a3
-
SHA256
e03707aeffd0033fa8a77995ef9309ea619d2b681af350a6794a2e3039096fd5
-
SHA512
0eaf87e7026f8e4fb60b192ebb81a7089c30a9995f1d29f5c18074aa7267ad91c9c6bc29a3ad3ab214670d26aa02e8cd298814557c75da2e2849b78952f61d33
-
SSDEEP
768:ShdxbnVLtTu7kawTflTdiQszOHWZ7g3g3pLQV3he3c3mAF6Hvsu93uq5p3xp:SjVLtTuoDjD34sMH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ca03512d729da8ca6ee828de9bf2926
Files
-
3ca03512d729da8ca6ee828de9bf2926.exe windows:4 windows x86 arch:x86
d8830768e26d5542e5a19dad95d6bbc7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
ExitProcess
user32
FindWindowA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE