Static task
static1
Behavioral task
behavioral1
Sample
3e327e144e786d5d940900b3503bb921.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e327e144e786d5d940900b3503bb921.exe
Resource
win10v2004-20231215-en
General
-
Target
3e327e144e786d5d940900b3503bb921
-
Size
14KB
-
MD5
3e327e144e786d5d940900b3503bb921
-
SHA1
d28b0dad33d3baed91ec5aafb81c4f06e982df86
-
SHA256
a5cfac378788ea688060f32fd28dcea77cf25cba37ec5500418bd9e110ce7de7
-
SHA512
d200ff11a59a18d42f0b26a344ffac26393dbb71520aec7aaba98076be28ef39713b7ac3b50e9281c4df29450daba7a7d25706bfaa0e670b7908138e2893a7ce
-
SSDEEP
384:lzk179Ihq+dwxlDFi14RdZo6PxC9pysVcHf:lzohIqym2gn+pyoc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e327e144e786d5d940900b3503bb921
Files
-
3e327e144e786d5d940900b3503bb921.exe windows:4 windows x86 arch:x86
87eb14ba60ecda29587478dbddde3c4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strcmp
__toascii
_adj_fprem
asin
_chdir
_atodbl
kernel32
CreatePipe
FindResourceA
GetBinaryTypeA
GetCommandLineA
GetConsoleCP
GetConsoleFontSize
Sections
.text Size: 9KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE