Static task
static1
Behavioral task
behavioral1
Sample
3e704ea4428e3a62c78b7a998f7f6f6f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e704ea4428e3a62c78b7a998f7f6f6f.exe
Resource
win10v2004-20231222-en
General
-
Target
3e704ea4428e3a62c78b7a998f7f6f6f
-
Size
260KB
-
MD5
3e704ea4428e3a62c78b7a998f7f6f6f
-
SHA1
88839d65e9794f48d8934586038665bbf9b7e02e
-
SHA256
863507d45b7b23705dd55d03f93c961fe288a476b714e1a860faccb672d8d193
-
SHA512
4e3aac0218dccd1ded65dd702fa6f0085e9f051dfe505965601d2e66c93451419fcaef12f9329533c7f27eaccc70b99d3c35a7cc18c7be94524d445fa348f078
-
SSDEEP
3072:QPojD52sRpvqLOeTb0J1rJgqfSLRDyhu:QPojXCL3e1rJFBu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e704ea4428e3a62c78b7a998f7f6f6f
Files
-
3e704ea4428e3a62c78b7a998f7f6f6f.exe windows:1 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ExitProcess
Sections
CODE Size: 256KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ