Static task
static1
Behavioral task
behavioral1
Sample
e2f5a550e7fb07a73cb6bdee529ce5e2d2c47b3a372d756a284e2b0f40a39a38.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e2f5a550e7fb07a73cb6bdee529ce5e2d2c47b3a372d756a284e2b0f40a39a38.exe
Resource
win10v2004-20230703-en
General
-
Target
e2f5a550e7fb07a73cb6bdee529ce5e2d2c47b3a372d756a284e2b0f40a39a38
-
Size
656KB
-
MD5
13be898d374a969135493bfc96aff7ea
-
SHA1
fffcb4e13b01a178b2e64ea450f8d86cd5817596
-
SHA256
e2f5a550e7fb07a73cb6bdee529ce5e2d2c47b3a372d756a284e2b0f40a39a38
-
SHA512
dbd3d9025765b654f898904b4ff0adcfdad7891eaa01300e9f81e72b364eff3aa7d3312b4cc925206f520e5901f5601474b6ec286def6ca9a88c9b2342f5245b
-
SSDEEP
12288:2x9GR5AITvJYjXaiUpkcRiFfp8UIicAIV0IE+eZqfPGQcqccTBbcvssPAVYSViD:2x9GDAqvJ0XckcM52vV0I1UqfPG0Cssv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2f5a550e7fb07a73cb6bdee529ce5e2d2c47b3a372d756a284e2b0f40a39a38
Files
-
e2f5a550e7fb07a73cb6bdee529ce5e2d2c47b3a372d756a284e2b0f40a39a38.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 647KB - Virtual size: 647KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ