Static task
static1
Behavioral task
behavioral1
Sample
3e1881cae56b1f49fd834e3a592d395b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e1881cae56b1f49fd834e3a592d395b.exe
Resource
win10v2004-20231215-en
General
-
Target
3e1881cae56b1f49fd834e3a592d395b
-
Size
132KB
-
MD5
3e1881cae56b1f49fd834e3a592d395b
-
SHA1
864c8802b1b6793d587454d41880996382107de8
-
SHA256
3aca7f3e1715f6a22fae10696bbe12d842bff866d33c06807db4266d7910c590
-
SHA512
c13db9b25b2ff1832956f4bf38347534c7858a75a55bd1109d8aba07124f4dd4c7ff640cf65a4e93301d7534a5cdf8879191de567c1fe563cb7c21b0f236dce3
-
SSDEEP
768:Ba/raHM782f9rvs2Zg5nicskQzTGfxgzh3emu4v/eB4z7VP7LdGSu2HyTAzfMgT+:g/roM7ZJfUQWgY54v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e1881cae56b1f49fd834e3a592d395b
Files
-
3e1881cae56b1f49fd834e3a592d395b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
��0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lnrdlyc Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nkmbxwc Size: - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nmpvtzi Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dnikpcl Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pjgfhiz Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE