Static task
static1
Behavioral task
behavioral1
Sample
e059b012ec11a8448416744a8306ac1c7bfde5f66a194adb8696243beaa1bd91.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e059b012ec11a8448416744a8306ac1c7bfde5f66a194adb8696243beaa1bd91.exe
Resource
win10v2004-20230915-en
General
-
Target
e059b012ec11a8448416744a8306ac1c7bfde5f66a194adb8696243beaa1bd91
-
Size
4.1MB
-
MD5
4db9a8589bc0643fde0484cd555bbb29
-
SHA1
b972d4f73d7dff945b7f232bca5c23235f10760d
-
SHA256
e059b012ec11a8448416744a8306ac1c7bfde5f66a194adb8696243beaa1bd91
-
SHA512
3931e050652b57fe3c50d172f408408d9f26dc65f59f26a12864423bf5d210cdcbacc535d01afb51d4a08a34c675d119a0d784b70efd02385dddac48a8f09c48
-
SSDEEP
98304:p04Shu1vHKexV3OyXlPFSZWGverAnI0hylpYmkz:SA1vH77XlIZOAlIi9z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e059b012ec11a8448416744a8306ac1c7bfde5f66a194adb8696243beaa1bd91
Files
-
e059b012ec11a8448416744a8306ac1c7bfde5f66a194adb8696243beaa1bd91.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.5MB
IMAGE_SCN_MEM_READ
VProtect Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 3.5MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 48KB - Virtual size: 48KB
IMAGE_SCN_MEM_READ