Static task
static1
Behavioral task
behavioral1
Sample
e9d36672e527ba8c82e1999cb73ce3ae4d478eb1a619f077da449d419c6a85cc.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e9d36672e527ba8c82e1999cb73ce3ae4d478eb1a619f077da449d419c6a85cc.exe
Resource
win10v2004-20230220-en
General
-
Target
e9d36672e527ba8c82e1999cb73ce3ae4d478eb1a619f077da449d419c6a85cc
-
Size
118KB
-
MD5
3fcca27f1e843ff401d092fbcb58f7f8
-
SHA1
7caeb3e841edd2f0953d16c674cd058f59417f85
-
SHA256
e9d36672e527ba8c82e1999cb73ce3ae4d478eb1a619f077da449d419c6a85cc
-
SHA512
f5ccde99a7e93a641f9277313b76bec959dfad9e77f677561655ae06fed433a0300e9f10d6036977f37b6af0e4dbf9cfd577a6aa89a2c169ae318978c9fae34a
-
SSDEEP
1536:01MayUAPY//YohNhGkOAf9gO3XUO1v8G1NCbuCe6sJDyjsSYQnvy1QMLMIcfHFVO:jf+3pWkOs9Fr8GbeVenQjxy1QMLM4VH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9d36672e527ba8c82e1999cb73ce3ae4d478eb1a619f077da449d419c6a85cc
Files
-
e9d36672e527ba8c82e1999cb73ce3ae4d478eb1a619f077da449d419c6a85cc.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
WWX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WWX1 Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE