Static task
static1
Behavioral task
behavioral1
Sample
e3b39700a1e4d592568d93dcbe47fc2e2b8f02a3202a0d41d5540a8439be95abN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e3b39700a1e4d592568d93dcbe47fc2e2b8f02a3202a0d41d5540a8439be95abN.exe
Resource
win10v2004-20240802-en
General
-
Target
e3b39700a1e4d592568d93dcbe47fc2e2b8f02a3202a0d41d5540a8439be95abN
-
Size
47KB
-
MD5
92dd043be9d00fa2024633d607139de0
-
SHA1
b5a58c35b94e2232b6fbc636e5dd64a211efb86e
-
SHA256
e3b39700a1e4d592568d93dcbe47fc2e2b8f02a3202a0d41d5540a8439be95ab
-
SHA512
9d4d14b3f1cc221dc75b30ee2b2c428d83b275e1c43ff4b116065399ee212e8540c0e25c675cda52e448954c6ac57580aa13a4b9fb3c7e6654ea1be771c1976a
-
SSDEEP
768:2oChVPbaWx2gnGYaWMy5YXc7kAiYe1yCE0xyfCCx782YNDfdUk0tOI75T5xBchLV:6Hb9h+WMjAu120xyfCCxSJ1YtOIp5fc/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e3b39700a1e4d592568d93dcbe47fc2e2b8f02a3202a0d41d5540a8439be95abN
Files
-
e3b39700a1e4d592568d93dcbe47fc2e2b8f02a3202a0d41d5540a8439be95abN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 9KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ