Static task
static1
Behavioral task
behavioral1
Sample
3e957dd02116711c2a51956aaeecb36e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e957dd02116711c2a51956aaeecb36e.exe
Resource
win10v2004-20231215-en
General
-
Target
3e957dd02116711c2a51956aaeecb36e
-
Size
9KB
-
MD5
3e957dd02116711c2a51956aaeecb36e
-
SHA1
4a1de7e011fdee0ce12604e99d73c9d1e35d0622
-
SHA256
e98ef8d212c5c544d8ef7f3be208825e7aeddc366ef0517580ea033aa7216597
-
SHA512
46f97daf244ab625ccf0a013200e015fc1b420d0e83d0cd92580421baedc7c5c5fa34a2b4d812a31743eb67e5f3695e6fdad038269818d7af920c5b4f1f82eb2
-
SSDEEP
192:Nv6aFz/vk8Noll8weoRPDlCRKfIMemF17gx7GaX7KgEO+M/q2YT3Fwd5We6YcxFj:Nv6QjkSsuy5CRipdFhgnX7KgENM/h0yk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e957dd02116711c2a51956aaeecb36e
Files
-
3e957dd02116711c2a51956aaeecb36e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 278KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE