Static task
static1
Behavioral task
behavioral1
Sample
a3e6cf2167f683b3a69fe2f9ef347c5c.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a3e6cf2167f683b3a69fe2f9ef347c5c.exe
Resource
win10v2004-20240221-en
General
-
Target
a3e6cf2167f683b3a69fe2f9ef347c5c
-
Size
24KB
-
MD5
a3e6cf2167f683b3a69fe2f9ef347c5c
-
SHA1
be6645896c8cb6a4c6c90e33d327ae4c698a841c
-
SHA256
6c2088379a00dd2bea474080543b29ee20ce93275143e67692a9ae62f7f24079
-
SHA512
f64bb2361919687f2d21c0cc3162735e763032ce2bff040c4982c67d83867e542e1e4c5d66ce633d32bb3c55c89ead925155a2e86d87917cf4c79454ff842be9
-
SSDEEP
384:HfLQ7+ckPLJtYcoYw2QXP4APoVUvtCJL7W4QLlHbH/1R5:NPMldXP4UuHFQdbfP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3e6cf2167f683b3a69fe2f9ef347c5c
Files
-
a3e6cf2167f683b3a69fe2f9ef347c5c.exe windows:4 windows x86 arch:x86
31ad768b82c494314584b679e3455bbb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
lstrcatA
GetProcAddress
LoadLibraryA
msvcrt
_strdup
strlen
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ