Static task
static1
Behavioral task
behavioral1
Sample
3e3c864fc5ed69b810864d2a29cfe011.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e3c864fc5ed69b810864d2a29cfe011.exe
Resource
win10v2004-20231222-en
General
-
Target
3e3c864fc5ed69b810864d2a29cfe011
-
Size
5KB
-
MD5
3e3c864fc5ed69b810864d2a29cfe011
-
SHA1
f4ba9542b388dc431241e54c82f9efc813d05a43
-
SHA256
dce24a87908d7ac89e4d32aa021f248d28b46b8fa4091458896df6a8ce10bbdb
-
SHA512
6c747b2fbc4943f19980fabbeaaa212974c6be43051e80b9c98417d48539fa28e55e5419dd7224e157ad4a4465e5303aa87986aa5f33abc78c7196009d2d75c5
-
SSDEEP
96:9aL69cuqai5ufy1/Eq4wynJQTxhZ94dG+kbmlFWeqZ4:9u+cuqZwfy1Mpw4yTx39aKyFZqZ4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e3c864fc5ed69b810864d2a29cfe011
Files
-
3e3c864fc5ed69b810864d2a29cfe011.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 736KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ