Static task
static1
Behavioral task
behavioral1
Sample
e81b03a33ef92ae9555daf3f78d27a88dea9ec3396bb89de9d540c03a2a83e86.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
e81b03a33ef92ae9555daf3f78d27a88dea9ec3396bb89de9d540c03a2a83e86.exe
Resource
win10v2004-20231020-en
General
-
Target
e81b03a33ef92ae9555daf3f78d27a88dea9ec3396bb89de9d540c03a2a83e86
-
Size
5.6MB
-
MD5
14bba6d21836e05c53c0427aa55ae6a8
-
SHA1
366a1b27b70b79cd656ac5fdf6fa01ca8b9c05b9
-
SHA256
e81b03a33ef92ae9555daf3f78d27a88dea9ec3396bb89de9d540c03a2a83e86
-
SHA512
205456cdf4f2a78adbb867ec8d1522854e6581c1b24b43a58e10d1960579a94e8a2e77bf5ec5dc5649720a5f524427b87259a822cdf0367b573ec1696d79cf2e
-
SSDEEP
98304:+qxuu1n8zRUcMJ6zJPjF2Udxk7Qd5951ewdN4kZ8Y1SXQidxkLee:cu1cU3J6zJLF2Oxk7Qv9/bZVVidxcee
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e81b03a33ef92ae9555daf3f78d27a88dea9ec3396bb89de9d540c03a2a83e86
Files
-
e81b03a33ef92ae9555daf3f78d27a88dea9ec3396bb89de9d540c03a2a83e86.exe windows:5 windows x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.2MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.3MB - Virtual size: 14.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1012KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zelsbrge Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ruejvkih Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE