Static task
static1
Behavioral task
behavioral1
Sample
3ca1e6fce73546a0380516c7ce8a117b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ca1e6fce73546a0380516c7ce8a117b.exe
Resource
win10v2004-20231215-en
General
-
Target
3ca1e6fce73546a0380516c7ce8a117b
-
Size
370KB
-
MD5
3ca1e6fce73546a0380516c7ce8a117b
-
SHA1
644a9258bd0eaef221ce349b3bb1582af9790d30
-
SHA256
e9e48050be038f81d541add0f5ca363c25682770d1a0fb1685a118c632208579
-
SHA512
1c32f76bd66718e81efacf5f6ca8bba31c090d81f749b3979e4583e77eb0bbc6d837d7b001d4c9d7a3eacf6823760c7498eaa174785ab6eefd6805c44cd03441
-
SSDEEP
6144:EI8pPBX6HIR9C57HVTvZoCIRs7Ecas9lALL2NjrUYADYPYzgc4+weAbs/d9qq9Eq:EwHIR9yVzZvI7ctQL7jDYpHeAbs/79Eq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ca1e6fce73546a0380516c7ce8a117b
Files
-
3ca1e6fce73546a0380516c7ce8a117b.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 299KB - Virtual size: 620KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rs Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
So Size: 908B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: