Static task
static1
Behavioral task
behavioral1
Sample
e935dd2491e4232ef0ac298e28b4054899c67b52267d0ddf96e8086ec51e3e9e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e935dd2491e4232ef0ac298e28b4054899c67b52267d0ddf96e8086ec51e3e9e.exe
Resource
win10v2004-20230915-en
General
-
Target
e935dd2491e4232ef0ac298e28b4054899c67b52267d0ddf96e8086ec51e3e9e
-
Size
198KB
-
MD5
cffd92ba9b5467838361b392d833eace
-
SHA1
326d74006f4a8ee6051fca87766980040951ecef
-
SHA256
e935dd2491e4232ef0ac298e28b4054899c67b52267d0ddf96e8086ec51e3e9e
-
SHA512
6afadcc481a87aff3b1a30035ac2745bf95f36cb30adc4ce65e4dfbe6806c0cf9c3d86d5063c736b4fec14951c61e1a24668ee19baba4b344b378492c78f4b5d
-
SSDEEP
3072:cv4Vrv6m22mI68KJ9qUGwTW1Hc40MMQfKplSEeZvINymw6iR+AMu:cv4pv63V8cqsa18403YilIINOhR+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e935dd2491e4232ef0ac298e28b4054899c67b52267d0ddf96e8086ec51e3e9e
Files
-
e935dd2491e4232ef0ac298e28b4054899c67b52267d0ddf96e8086ec51e3e9e.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 195KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ