Static task
static1
Behavioral task
behavioral1
Sample
e30a2fff14ce8345e0e70f938cc0fb6d1533e72099b77803833333a4c669a841.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e30a2fff14ce8345e0e70f938cc0fb6d1533e72099b77803833333a4c669a841.exe
Resource
win10v2004-20230915-en
General
-
Target
e30a2fff14ce8345e0e70f938cc0fb6d1533e72099b77803833333a4c669a841
-
Size
3.4MB
-
MD5
c4a53843cf05947f88eaf94e7386e87f
-
SHA1
1d81ef894ee69a3edf54f32574db38478a616b2f
-
SHA256
e30a2fff14ce8345e0e70f938cc0fb6d1533e72099b77803833333a4c669a841
-
SHA512
831ad96d5066db50510362218a15340b8fa92c834f8468a926f44816423116b76119342b442dee81227e761b4247623f4e075c43ea5f9e74021b6e3c1157f492
-
SSDEEP
49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlThzhlgRvzCGLrKwyG:c+8X9G3vP3AMxZivzCOrKPG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e30a2fff14ce8345e0e70f938cc0fb6d1533e72099b77803833333a4c669a841
Files
-
e30a2fff14ce8345e0e70f938cc0fb6d1533e72099b77803833333a4c669a841.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 994KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ