Static task
static1
Behavioral task
behavioral1
Sample
3ef7f6e18d467c03d78b06883249691b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ef7f6e18d467c03d78b06883249691b.exe
Resource
win10v2004-20231215-en
General
-
Target
3ef7f6e18d467c03d78b06883249691b
-
Size
39KB
-
MD5
3ef7f6e18d467c03d78b06883249691b
-
SHA1
b0e23d9ebd0bc63479b963768e9bd7c5aa382ee0
-
SHA256
657cb2548e95b39523cadbd45fcb14987979024a573789a19386ec70cf169557
-
SHA512
c99ea9d2c75dd35931c4d57a814f9e9f8290b538be6104d258ad33ca408025060f671428c65a6ef1957ee288449bb2e802fa4351c4f2fd0ca16cef74a36a3b40
-
SSDEEP
768:c7adL2vfM8FXgIlUKsie3Zy0U7I1PZeeqDBkfuSgOy4GGzR:nMM8FXgIlUKQJjUOx4OY54T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ef7f6e18d467c03d78b06883249691b
Files
-
3ef7f6e18d467c03d78b06883249691b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
rs3itu0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rs3itu1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rs3itu2 Size: 19B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE