Static task
static1
Behavioral task
behavioral1
Sample
c3b5f03ab7993f7eeb752b91524a355d243e2d3c691e2d407441af023b41acb6.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c3b5f03ab7993f7eeb752b91524a355d243e2d3c691e2d407441af023b41acb6.exe
Resource
win10v2004-20240508-en
General
-
Target
c3b5f03ab7993f7eeb752b91524a355d243e2d3c691e2d407441af023b41acb6
-
Size
12KB
-
MD5
0a978a2d3f6a595c4de88cc71ce3c6ea
-
SHA1
bab91eda35fcc30f43a017def487ab61fe3840a8
-
SHA256
c3b5f03ab7993f7eeb752b91524a355d243e2d3c691e2d407441af023b41acb6
-
SHA512
bcf2a7f8ea401616edb814ff71cd8449e02fc30dd7555a1b54b80f82f4797c570766a799331e24d5b79e86da962c56d8a1fe6d2bd39a64ca8ae347720d27f0d0
-
SSDEEP
384:HL7li/2zHq2DcEQvdQcJKLTp/NK9xaHH:rbMCQ9cHH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3b5f03ab7993f7eeb752b91524a355d243e2d3c691e2d407441af023b41acb6
Files
-
c3b5f03ab7993f7eeb752b91524a355d243e2d3c691e2d407441af023b41acb6.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ