Static task
static1
Behavioral task
behavioral1
Sample
e849e8325298ed088defa4ce4444202ad386dba396a92bde038a39d05e9ffe8e.exe
Resource
win10v2004-20230220-en
General
-
Target
e849e8325298ed088defa4ce4444202ad386dba396a92bde038a39d05e9ffe8e
-
Size
3.9MB
-
MD5
9dae5ebee8904addaff745946ade5d9c
-
SHA1
a5dbaf47696a7e51ace1b608dc180d798cdc6762
-
SHA256
e849e8325298ed088defa4ce4444202ad386dba396a92bde038a39d05e9ffe8e
-
SHA512
7a1d2a3d98a92f902b0fdd60243dac38baae96c1e84573a9700b21e7f46afdb4ef60d1b27a553e90ca799311e4a85dc926c0e0c837455bc9eaf422b5858e6f3e
-
SSDEEP
49152:G2H3OdT2gMT1RVdKwLB9rz0EnMjzb5k2vqLCY2bXIhGCjkXwGIppKYab53uiNGAt:
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e849e8325298ed088defa4ce4444202ad386dba396a92bde038a39d05e9ffe8e
Files
-
e849e8325298ed088defa4ce4444202ad386dba396a92bde038a39d05e9ffe8e.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ