Static task
static1
Behavioral task
behavioral1
Sample
e1290a9463ef7d1d61645b7d3fd3e4a7518023091f85ab4085308f70d437707f.exe
Resource
win7-20230220-en
General
-
Target
e1290a9463ef7d1d61645b7d3fd3e4a7518023091f85ab4085308f70d437707f
-
Size
3.0MB
-
MD5
e81570d802d26df3dde953770c8c9766
-
SHA1
d8df423343b59f8b53f10722b023622477e5fb31
-
SHA256
e1290a9463ef7d1d61645b7d3fd3e4a7518023091f85ab4085308f70d437707f
-
SHA512
1d03bc26a97b4eb680fe9d1996c525e086f6efcb40db2946e7297544a85cd0b6999ac03ed11048dc424631a643ba95a0624865351e86fb76ebc61641c73b7778
-
SSDEEP
98304:XWrcYe0Hec7sl5cWF4bMQDZSQav8CzmU+z:5YQ7vcWOxSQasJz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1290a9463ef7d1d61645b7d3fd3e4a7518023091f85ab4085308f70d437707f
Files
-
e1290a9463ef7d1d61645b7d3fd3e4a7518023091f85ab4085308f70d437707f.exe windows x64
79b3362178937bf9559741c46bb9e035
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
Sections
.MPRESS1 Size: 2.8MB - Virtual size: 8.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 202KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE