Static task
static1
Behavioral task
behavioral1
Sample
c3a56d6991dcf6c377c9a5a3c2c7d4b8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c3a56d6991dcf6c377c9a5a3c2c7d4b8.exe
Resource
win10v2004-20240226-en
General
-
Target
c3a56d6991dcf6c377c9a5a3c2c7d4b8
-
Size
82KB
-
MD5
c3a56d6991dcf6c377c9a5a3c2c7d4b8
-
SHA1
fd462de382dce12005f9e9f35c9b489aacb65d38
-
SHA256
033cb8b9d16093f609a6d73705d53cc37f6e10e241228d1f0828d78d960b1233
-
SHA512
2f7a9465f58a5ea3a9f32b4d40204d67648a3a9f78917a58af563389c04a41e53539a044f62af0f9e0687393b12f4f4c402a5de6113516125bf08a72525b037b
-
SSDEEP
1536:VBJrbZY2Qhsju+Op781bGURfuL01l8aut1o+F8GG8zSA18MkB+axFW:VBJBY2QhRX78Nz2L7aS1vZGF2wPxg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3a56d6991dcf6c377c9a5a3c2c7d4b8
Files
-
c3a56d6991dcf6c377c9a5a3c2c7d4b8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ