Static task
static1
Behavioral task
behavioral1
Sample
3e9ec33dfb70267695f2f4af7ead42c3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e9ec33dfb70267695f2f4af7ead42c3.exe
Resource
win10v2004-20231215-en
General
-
Target
3e9ec33dfb70267695f2f4af7ead42c3
-
Size
47KB
-
MD5
3e9ec33dfb70267695f2f4af7ead42c3
-
SHA1
a91a185086781141dd3bcf4efeb865c157830df8
-
SHA256
3835c83e7bc3624e8420899ff5f0c6d5dd391e9992a5e0099dd2f0e71f2ebf6f
-
SHA512
3dc3b81477e4c9b9cbc8715f31e2171e360385ae0fc62907be0388c02037d637d362ee46ab63468f380e091a2bbbfdea25cc82d1bb6e77199e2a638fefe6819c
-
SSDEEP
768:Z2Zx+256Eb6amXGohr1ih1DYXmwX/VjNbC5KuL1tqlypX0Z9C6KomNiojHcb:Z2zX56A6rxgh1DYTvVgIG1tkyuZ9dKoF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e9ec33dfb70267695f2f4af7ead42c3
Files
-
3e9ec33dfb70267695f2f4af7ead42c3.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE