Static task
static1
Behavioral task
behavioral1
Sample
3ea5ee65bbae2f7cb2731736d8354b41.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ea5ee65bbae2f7cb2731736d8354b41.exe
Resource
win10v2004-20231215-en
General
-
Target
3ea5ee65bbae2f7cb2731736d8354b41
-
Size
28KB
-
MD5
3ea5ee65bbae2f7cb2731736d8354b41
-
SHA1
dd069353abab1be58b1967be1b6a4237244c1f8e
-
SHA256
d84e494f690f8ea75b871e15acdcaabb18126adc4720f850acbddc2e22da02df
-
SHA512
b095014ac23b3a60f6ad842aeaff65fc91f035de85e553f4abe183c209d2db456af1c6a7ae03cd419d3dfd4f3545c927c6660a84a23294dabaf4ecb3c95299ca
-
SSDEEP
384:Wa4w7rUKN07whKO31ZIBQp5XUVrY3DbD4N7oYX4EOHiUo+dKXBqxtEEEci:eSYKq7whjlZIlrY/8CdCULKXBsKc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ea5ee65bbae2f7cb2731736d8354b41
Files
-
3ea5ee65bbae2f7cb2731736d8354b41.exe windows:4 windows x86 arch:x86
51c4e98e76bd946f81a1a9c26b55ce8b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord1
Sections
.text Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE