Static task
static1
Behavioral task
behavioral1
Sample
e9bbea47a0f6224edcf727ac6d68799663cf3df726f723a0a790f483d6ca60bc.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e9bbea47a0f6224edcf727ac6d68799663cf3df726f723a0a790f483d6ca60bc.exe
Resource
win10v2004-20230915-en
General
-
Target
e9bbea47a0f6224edcf727ac6d68799663cf3df726f723a0a790f483d6ca60bc
-
Size
199KB
-
MD5
1c1a85acc4ea5109e359f10d163c149b
-
SHA1
66a537218ecc24b634292d87a6cb769cfb91af39
-
SHA256
e9bbea47a0f6224edcf727ac6d68799663cf3df726f723a0a790f483d6ca60bc
-
SHA512
56a0ac028c04d5a8b1e20206c3117bd5101ad2db132e37f914fc99c2c7f9908ba5b16bc7f98c786bc7cb0ee4469718b26f76620ec59fa600a4e3abd19ee69cc0
-
SSDEEP
6144:rBs27MMLyX5HXXXDTXXXOGqIII+pXXX5AYjKXXXDoXXXG6XXXxXXXLIIIEAkOCOx:rK20HXXX/XXXFqIIIcXXX5j2XXXcXXXw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9bbea47a0f6224edcf727ac6d68799663cf3df726f723a0a790f483d6ca60bc
Files
-
e9bbea47a0f6224edcf727ac6d68799663cf3df726f723a0a790f483d6ca60bc.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE