Static task
static1
Behavioral task
behavioral1
Sample
e749f4b0698c794a08c17834072254e8af09210697a72198a74e9c3930cd7b8d.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
e749f4b0698c794a08c17834072254e8af09210697a72198a74e9c3930cd7b8d.exe
Resource
win10v2004-20231023-en
General
-
Target
e749f4b0698c794a08c17834072254e8af09210697a72198a74e9c3930cd7b8d
-
Size
553KB
-
MD5
abb321bdd00fdf8cc2eda180806f2d64
-
SHA1
ca88df98b2aad4b6acb874df8dfde91dd17428f1
-
SHA256
e749f4b0698c794a08c17834072254e8af09210697a72198a74e9c3930cd7b8d
-
SHA512
787ddb98691476ebbb5b12410c31270086f53480acb5af5df0cc68614f0ee39e1459951f757c2a8b10bcda978cc544c3cc653ea026285ceeb3ea95bea31249ee
-
SSDEEP
12288:ZjQ+R3PV+MTU88+yPYsDNJwalZmwzFM8xidZ3VwIQ:ZjhR3PV+IvMI8FMVZ7Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e749f4b0698c794a08c17834072254e8af09210697a72198a74e9c3930cd7b8d
Files
-
e749f4b0698c794a08c17834072254e8af09210697a72198a74e9c3930cd7b8d.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 501KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 900B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ