Static task
static1
Behavioral task
behavioral1
Sample
c3ee3968b0a2d1143e5c8d33e5bf0447.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c3ee3968b0a2d1143e5c8d33e5bf0447.exe
Resource
win10v2004-20240226-en
General
-
Target
c3ee3968b0a2d1143e5c8d33e5bf0447
-
Size
376KB
-
MD5
c3ee3968b0a2d1143e5c8d33e5bf0447
-
SHA1
432bb6722ae1dc490ae9a47a784f2868407e0530
-
SHA256
9a86cb341ff1cddd7fb04d62db96cebfb53050642fa3abdcc0f2ef5b752cf1a2
-
SHA512
35eb8620f9aaa780d56e91c2803d22db6b91db9b376c3afe82d0a9cfaa10ce3ceac5e62f276c389f8984ee87aec8b174279a3e891853ea270a5034232bb53196
-
SSDEEP
6144:lcgpQDAp/9pXfr6G6untPlmpe9rO8eb5CP+X6IguqWUZxDxiLTg:nQ8p/bXWGTxweh88iFiWsxDKg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3ee3968b0a2d1143e5c8d33e5bf0447
Files
-
c3ee3968b0a2d1143e5c8d33e5bf0447.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ