Static task
static1
Behavioral task
behavioral1
Sample
3ea8edb98e7a6bab18840d2d5849e309.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ea8edb98e7a6bab18840d2d5849e309.exe
Resource
win10v2004-20231215-en
General
-
Target
3ea8edb98e7a6bab18840d2d5849e309
-
Size
68KB
-
MD5
3ea8edb98e7a6bab18840d2d5849e309
-
SHA1
0f4291aa961c82cee7d39e50843e97c9db7aaf08
-
SHA256
c3703c149f39f3a14601c155459abaa7d56f7bc3a948adabdfa073d04fafbec5
-
SHA512
6621a3fa4a975d608c575e2354bd9fd19ba338e92616960339328ff1486b18179c51d15e975a5adece44871b7ab02a665f17b9f1697a3cc9951423816285650b
-
SSDEEP
768:HZMNZ8+bCWuIHN0uRpXB+c3tKRRZ2CoCAod4edWgP9uxlO+n1RLP5ZnyBO3ma3CK:HZE+oN1B+xzvoto+NZn1pPGgmcCMf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ea8edb98e7a6bab18840d2d5849e309
Files
-
3ea8edb98e7a6bab18840d2d5849e309.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ