Static task
static1
Behavioral task
behavioral1
Sample
d3ca986bda55dbe5e3a390117e286f8a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d3ca986bda55dbe5e3a390117e286f8a.exe
Resource
win10v2004-20231215-en
General
-
Target
d3ca986bda55dbe5e3a390117e286f8a
-
Size
174KB
-
MD5
d3ca986bda55dbe5e3a390117e286f8a
-
SHA1
a5ffa1ccb372cd6951c38f51de76b08c66c29d1a
-
SHA256
24b23297780a6e5e832d8beeafc3ee8933dc8f9927c5cda0a8dcfe477c6296b2
-
SHA512
dcea716d27395e1de772da40112405b2253e888eaae0d493c34b1b15b7a25c459182878403e5bac7b9ec652f2811c2d9123d28203552fb38a8d1b41e7366cc5e
-
SSDEEP
3072:938vBrVba45nPJrOiEL2Ypv5ZjPQdQmWzVJ0+pwTucUgOqV6kMlQsVYQl1BFH33s:FCBJOInpw3vPPswVuxTuc5OqdQtY81Be
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3ca986bda55dbe5e3a390117e286f8a
Files
-
d3ca986bda55dbe5e3a390117e286f8a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
o8opbas Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
58pw4rpc Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vq Size: 4KB - Virtual size: 460B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE