Static task
static1
Behavioral task
behavioral1
Sample
3ea3de67f5b7d621d6b9e6624f86b54b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ea3de67f5b7d621d6b9e6624f86b54b.exe
Resource
win10v2004-20231215-en
General
-
Target
3ea3de67f5b7d621d6b9e6624f86b54b
-
Size
1.5MB
-
MD5
3ea3de67f5b7d621d6b9e6624f86b54b
-
SHA1
207523ecb9ad75f3ed68d21453957d4ecdbdf52e
-
SHA256
84689177a0db5c7976825b9046606a1c0fac05f58734858222031ea086a07b11
-
SHA512
cec0d8fdd54b6991e5f6b8ee7a7520f2b1bf8db817da8d966de8321540a357a8b5167b11557ea41663391cd62448a752ad6c04d618b35dde12f6b598bf227ba8
-
SSDEEP
49152:lrq0R07QQmJb3LxNwk6rA94GFNnloRlzRue5A+6:hq0+7qNwkye44NORb/p6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ea3de67f5b7d621d6b9e6624f86b54b
Files
-
3ea3de67f5b7d621d6b9e6624f86b54b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 484KB - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.0MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 676B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ