Static task
static1
Behavioral task
behavioral1
Sample
003ce3cbac2b5e8645f689a89027e5fb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
003ce3cbac2b5e8645f689a89027e5fb.exe
Resource
win10v2004-20231215-en
General
-
Target
003ce3cbac2b5e8645f689a89027e5fb
-
Size
71KB
-
MD5
003ce3cbac2b5e8645f689a89027e5fb
-
SHA1
42cf3b202e689f2cda2da53b6e0cde70ce843d1c
-
SHA256
12b9bfb1d63f04101418544efab2c856c34c81ba1b42f6f90f06d2d291ed6f2d
-
SHA512
ba925ba6dd188e5406e69a1baa72a538217623209ccc8ced03e61f5ceeefe060b021b8aa5528c47f460837857bbbce41d3857111e9f3cee05fc3a84d9b32aff7
-
SSDEEP
768:J8JWbnXDVPakro46xkkjvyrdxaiVKTW757gzUtf1zBmQzTGfmgyqS8U:yJ2JyeT6Ckja/TViQ2otf1zwQVgvSx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 003ce3cbac2b5e8645f689a89027e5fb
Files
-
003ce3cbac2b5e8645f689a89027e5fb.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE