Static task
static1
Behavioral task
behavioral1
Sample
ee3f73607f7d5f568992ab9930229e40_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ee3f73607f7d5f568992ab9930229e40_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
ee3f73607f7d5f568992ab9930229e40_exe32.exe
-
Size
14KB
-
MD5
ee3f73607f7d5f568992ab9930229e40
-
SHA1
b7d6399caf1f74366fd11c75884b9f6b3c9e4fc4
-
SHA256
7f56421050592cdf9049693c462b53d95dc6ed3d4e16d2778f9b643fc95e24ea
-
SHA512
b26d9cf3f1a0307b815df53e5ea5a579e6e353a20824250350f8fe34f25ddffbdc4211c8c2919db0dafbe3cfa568b9d1188b891dfb89d98f08b3bc7eaceaf255
-
SSDEEP
384:NMAUPaNaQ5e9JCDPouRSVeeeeeeeeKxKMGQDE045H+r3r3r3r3r:NhIu9KMzAEr3r3r3r3r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee3f73607f7d5f568992ab9930229e40_exe32.exe
Files
-
ee3f73607f7d5f568992ab9930229e40_exe32.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ