Static task
static1
Behavioral task
behavioral1
Sample
c3d99ee591dd286a9e7b88a00aaa5b19.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c3d99ee591dd286a9e7b88a00aaa5b19.exe
Resource
win10v2004-20240226-en
General
-
Target
c3d99ee591dd286a9e7b88a00aaa5b19
-
Size
28KB
-
MD5
c3d99ee591dd286a9e7b88a00aaa5b19
-
SHA1
4996d2b92b225d2421e93cef9a88a9930b1d69e5
-
SHA256
b427e3b990938649805c027330150604d5d155db33f60f547a893e7a6325e1db
-
SHA512
fac0d6f6ddca854c07e151c6a60a1dbc83724ef1c727e1599f6a94811efcc6fe1aada390256e2a3ae48cef62784020c41058d5caeb8d498445e239561ff02b9e
-
SSDEEP
768:TvKE6dcpRPKdJoS7XeecBI5oMLbIOcGY6:J6d+RPEoSjHcBI5lIOk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3d99ee591dd286a9e7b88a00aaa5b19
Files
-
c3d99ee591dd286a9e7b88a00aaa5b19.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 597B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ