Static task
static1
Behavioral task
behavioral1
Sample
e949f8b61805dd1bf8bcad282acbeb6b2abe8ff7c4b24193929d7b1af23a2687.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e949f8b61805dd1bf8bcad282acbeb6b2abe8ff7c4b24193929d7b1af23a2687.exe
Resource
win10v2004-20230915-en
General
-
Target
e949f8b61805dd1bf8bcad282acbeb6b2abe8ff7c4b24193929d7b1af23a2687
-
Size
2.1MB
-
MD5
143783e64066b4b2f6179a12170ea617
-
SHA1
cb7123406dccc9e9b21605bbe2e01d7949db177d
-
SHA256
e949f8b61805dd1bf8bcad282acbeb6b2abe8ff7c4b24193929d7b1af23a2687
-
SHA512
342eb9b5b4cd55c287b0a6cca8053552fa5758399b94de31384f87c0b873beab3a1abaaf60b4dd101783c923d8f9839adcc1050a573c1fa5586d91ddb19a486f
-
SSDEEP
49152:gwGLpl/2f70BKcdrpPAVOO6i5fi+GosIb3OskySdMIxUYG:Gl/00IcDPAsOz5j73D0MIxUYG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e949f8b61805dd1bf8bcad282acbeb6b2abe8ff7c4b24193929d7b1af23a2687
Files
-
e949f8b61805dd1bf8bcad282acbeb6b2abe8ff7c4b24193929d7b1af23a2687.exe windows:4 windows x86
2eabe9054cad5152567f0699947a2c5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 568KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cywybcwa Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
epjxyjxx Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE