Static task
static1
Behavioral task
behavioral1
Sample
3ca16581d42606394854a78858e997d1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ca16581d42606394854a78858e997d1.exe
Resource
win10v2004-20231222-en
General
-
Target
3ca16581d42606394854a78858e997d1
-
Size
57KB
-
MD5
3ca16581d42606394854a78858e997d1
-
SHA1
31e3a142afb4ddf1fd434cd87f13f6edc0553eea
-
SHA256
e1f4f03130ed2fcfa23321fded420f4fbe9839f2b18b69ba45d194ae09e921e2
-
SHA512
276476e04f704f5fdc7d67c9e759abfbd7475d1e10917c14d643404ccfd78831f064044ea78d9703e2b0a7096011da93aa9d85a4ab34d07907d0aa2b9aaa38bc
-
SSDEEP
768:9u88JmsOFMi3tYncdlDkQQa17xNnzvbEZ4LWv/RWjebG5KgnBTh8j:9uXmXWc/4fatDzMfHsp5KSh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ca16581d42606394854a78858e997d1
Files
-
3ca16581d42606394854a78858e997d1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ