Static task
static1
Behavioral task
behavioral1
Sample
3ecdad787f7b6366c8cc8457d849031a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ecdad787f7b6366c8cc8457d849031a.exe
Resource
win10v2004-20231215-en
General
-
Target
3ecdad787f7b6366c8cc8457d849031a
-
Size
655KB
-
MD5
3ecdad787f7b6366c8cc8457d849031a
-
SHA1
426d07388993ba22337d66fd60e0d784917c1d2d
-
SHA256
cb62b052b412d632c3b804925b9ba7b89311d8eb2a13f591b56312e5c4fe8839
-
SHA512
5e5ea315e2eec8600777367039bcc1a60424bc31d36902ad4d8fa39fb7dd839265825c382b90329be6131f01b91d340373c4536752439cb9888bd43a12077b2c
-
SSDEEP
12288:U3UbTSUFWwHaQF1tq2XCDNVZ3HnN2fOpdsQTnXg:U3ITSUFHpUZVZHQfIQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ecdad787f7b6366c8cc8457d849031a
Files
-
3ecdad787f7b6366c8cc8457d849031a.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 469KB - Virtual size: 469KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ