Static task
static1
Behavioral task
behavioral1
Sample
3ed160c5fa6730490206a92abf93cec7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ed160c5fa6730490206a92abf93cec7.exe
Resource
win10v2004-20231215-en
General
-
Target
3ed160c5fa6730490206a92abf93cec7
-
Size
39KB
-
MD5
3ed160c5fa6730490206a92abf93cec7
-
SHA1
0e372895d09795c696b9cfc94ee503984e239d2e
-
SHA256
dcbbf6058dc28e0ad73062b07c6f211aa8e6482d7a1aceef2c982d5e2754bdd3
-
SHA512
afb3fce6beaf63a233a6333a0779ff6f630e9b6fef4f75ec6bf217698256504e259d87aa7e5a754bd73fb9dc5f11be8fe4ae34b490628c18c248d220230d8326
-
SSDEEP
768:/jXsHWtelmzjPPnnO8yp6QRezKwnccx1hRcCe39:b/8luQ6QTwnccx1hRcN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ed160c5fa6730490206a92abf93cec7
Files
-
3ed160c5fa6730490206a92abf93cec7.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE