Static task
static1
Behavioral task
behavioral1
Sample
3c89c1cae7c9ef5a85100d724592080e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3c89c1cae7c9ef5a85100d724592080e.exe
Resource
win10v2004-20231222-en
General
-
Target
3c89c1cae7c9ef5a85100d724592080e
-
Size
407KB
-
MD5
3c89c1cae7c9ef5a85100d724592080e
-
SHA1
472c1b8ddcbac4a4b76e3001a4a8b7c9ec9a255f
-
SHA256
16d642f2f6750be426666ae79621e0794bacf612178fa5771fe2088fc722a160
-
SHA512
252f1a3436b9f84ebdfa811d6ccc66fcf1101644fb274f53e11731cc6ca115a6a477c9ad0b09d5a112e88f47f721b26a52a927c90967bf31bc8699c4fdcfeaf0
-
SSDEEP
6144:uyH7xOc6H5c6HcT66vlm2IpHz77+r6U1eJkJbz0V+P3O3ZHlXLfPgkqh7yITMFQz:uaOsPQwPAHgkuTnr3rd4NUR5kAq6yo5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c89c1cae7c9ef5a85100d724592080e
Files
-
3c89c1cae7c9ef5a85100d724592080e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 548B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qnk Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE