Static task
static1
Behavioral task
behavioral1
Sample
3c5ebe5585bae8eeae9ca1f74f3be9d9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3c5ebe5585bae8eeae9ca1f74f3be9d9.exe
Resource
win10v2004-20231215-en
General
-
Target
3c5ebe5585bae8eeae9ca1f74f3be9d9
-
Size
597KB
-
MD5
3c5ebe5585bae8eeae9ca1f74f3be9d9
-
SHA1
69cd1473fd8c948a8c83f7309886d81aabbcbe83
-
SHA256
089410b8205d3e836a919c3151ba5262dd61dda1822f2266897e916a0614f4f1
-
SHA512
7642acfa5e851b0189d048357fbcf465382c694007461e1964708ce30b50d999cbeb799c5b63416797355f03b5dfcfbf91dc2f7ef6954e35cc0a65fe857cd847
-
SSDEEP
12288:eZBSLCh1XA6wEVuSKwCOe0BRD2iOTxNIAP3VvL6G9qqAF1ec1:ePSLz6wEV5RhOfImz908c1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c5ebe5585bae8eeae9ca1f74f3be9d9
Files
-
3c5ebe5585bae8eeae9ca1f74f3be9d9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 595KB - Virtual size: 596KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 180B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ