Static task
static1
Behavioral task
behavioral1
Sample
e2f5006e1aaef2772f0593ca9e63d13b.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e2f5006e1aaef2772f0593ca9e63d13b.exe
Resource
win10v2004-20230220-en
General
-
Target
e2f5006e1aaef2772f0593ca9e63d13b.exe
-
Size
987KB
-
MD5
e2f5006e1aaef2772f0593ca9e63d13b
-
SHA1
820ac589765395d48e18dbb3e21d74e01153197a
-
SHA256
9f1ee6916ffb1de887fd7f8e9a6c6a23cf588d6498db31e35182bfd5f94fd62a
-
SHA512
29cb2b09d89ebbee99921076f4319f110227293a3993b53d6a8eb748700e026e269c69caf0172ba55a6dedc37d60cedbdef5c40cfb3cba4e4dbef7260a932725
-
SSDEEP
24576:mTBHPs1M7p+HH714RAUBey7bwRV5/OeaT8x:AHPs1McH7epj70RD/OeE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2f5006e1aaef2772f0593ca9e63d13b.exe
Files
-
e2f5006e1aaef2772f0593ca9e63d13b.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 975KB - Virtual size: 974KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ