Static task
static1
Behavioral task
behavioral1
Sample
e446d2199a3ef618c8a794fd22b78ee3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
e446d2199a3ef618c8a794fd22b78ee3.exe
Resource
win10v2004-20231215-en
General
-
Target
e446d2199a3ef618c8a794fd22b78ee3
-
Size
54KB
-
MD5
e446d2199a3ef618c8a794fd22b78ee3
-
SHA1
cc8b7622e5c4c352985aee42df85639ca446884a
-
SHA256
ff4066f3c1f269928ae0addae647fb28833ab2180e90a55459ddd20fc469fbac
-
SHA512
4f52d48fbafa9459ce71f367b8eae0209cceb1e607ab9aec91c9059ad9497f3ba6f6125de265733dbadd06323e8c3f655abcccf0405ffd40e94117212c8e1054
-
SSDEEP
768:EEldXkihXstBnz9aNHi+GgX3IJOQEwZSfGBcnHcGIumAB5E0lXB1qK91UE9QzTGs:JdXkE87nccOtwqsIcGIjAPdrl8cQpCXI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e446d2199a3ef618c8a794fd22b78ee3
Files
-
e446d2199a3ef618c8a794fd22b78ee3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 33KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
petite Size: 385B - Virtual size: 385B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ