Static task
static1
Behavioral task
behavioral1
Sample
e04b1f13a1a85d3d282b7a737fe03b6f0ee4d29789419b3cca485e235cafb7bc.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e04b1f13a1a85d3d282b7a737fe03b6f0ee4d29789419b3cca485e235cafb7bc.exe
Resource
win10v2004-20230703-en
General
-
Target
e04b1f13a1a85d3d282b7a737fe03b6f0ee4d29789419b3cca485e235cafb7bc
-
Size
197KB
-
MD5
014e71997257a48162cc4f49ee245e73
-
SHA1
14a53e8dab824bd26e3bb6ff86b6ea36c304fe04
-
SHA256
e04b1f13a1a85d3d282b7a737fe03b6f0ee4d29789419b3cca485e235cafb7bc
-
SHA512
35df3c1d1c2857bf861fe7a97867f10eb8ac2083baae500431857e5498a0c81e628c9201c5ea122cd61b00a87df14054b8474a5f9c560434436c5cd3fba8d39b
-
SSDEEP
6144:rBs27MMLyX5HXXXDTXXXOGqIII+pXXX5AYjKXXXDoXXXG6XXXxXXXLIIIEAkOCOk:rK20HXXX/XXXFqIIIcXXX5j2XXXcXXXp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e04b1f13a1a85d3d282b7a737fe03b6f0ee4d29789419b3cca485e235cafb7bc
Files
-
e04b1f13a1a85d3d282b7a737fe03b6f0ee4d29789419b3cca485e235cafb7bc.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE