Static task
static1
Behavioral task
behavioral1
Sample
e4e682c808046cexeexeexeex.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
e4e682c808046cexeexeexeex.exe
Resource
win10v2004-20230703-en
General
-
Target
e4e682c808046cexeexeexeex.exe
-
Size
327KB
-
MD5
e4e682c808046c99257a63e2a50ac5b5
-
SHA1
3a271364af1e6de36b51d38517469599663ba872
-
SHA256
8eefb2e34bd17a09e9e479462530076abc708b690bab2247303f21ce1591272e
-
SHA512
43acd11187a22771a7c229e94fca159ead96a915acfcdb0705c696d32608ca6941642a09c477ce1d1edd6c8569be94c3718f3257ab3f09ea5ba690359b56dfb9
-
SSDEEP
6144:22+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:22TFafJiHCWBWPMjVWrXK0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4e682c808046cexeexeexeex.exe
Files
-
e4e682c808046cexeexeexeex.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 222KB - Virtual size: 221KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ