Static task
static1
Behavioral task
behavioral1
Sample
e863abf7c53cd438a421788484a1eb9975aa1e379b40925c59bbe49826bfe28f.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e863abf7c53cd438a421788484a1eb9975aa1e379b40925c59bbe49826bfe28f.exe
Resource
win10v2004-20230915-en
General
-
Target
e863abf7c53cd438a421788484a1eb9975aa1e379b40925c59bbe49826bfe28f
-
Size
12.2MB
-
MD5
bf999714bb8ee2ca1d9e85932df38201
-
SHA1
0c6891f7a2ec801180e0d8a86622d09c608ece94
-
SHA256
e863abf7c53cd438a421788484a1eb9975aa1e379b40925c59bbe49826bfe28f
-
SHA512
6a2d0e44c919e3f73508b67261e18a714c3d0c5a1afaa57816d05a3728596de172496c09efe72e56cc0bd80f54281f5b82eecd01e0c1bd74f5e12af1f5a138ff
-
SSDEEP
393216:qzCY4cvYIe5feHrK9e7KjvGi4FuqO4Y4FZ:rYkGHYe7KjvGFFuqOW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e863abf7c53cd438a421788484a1eb9975aa1e379b40925c59bbe49826bfe28f
Files
-
e863abf7c53cd438a421788484a1eb9975aa1e379b40925c59bbe49826bfe28f.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.enigma1 Size: 11.2MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 692KB - Virtual size: 692KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE