Static task
static1
Behavioral task
behavioral1
Sample
e685c99c8278b136b964ef04257d62c0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
e685c99c8278b136b964ef04257d62c0.exe
Resource
win10v2004-20231215-en
General
-
Target
e685c99c8278b136b964ef04257d62c0
-
Size
1.1MB
-
MD5
e685c99c8278b136b964ef04257d62c0
-
SHA1
a531482d6a29c35bcb829ef98383efe4add7f5da
-
SHA256
5d262e05210580550bf74618990bd8279589f4ba2e2ca12ad8bb9f0d19fd1aa6
-
SHA512
7c2a2aa32f3db5cdc0ba1b178e0503fb8dd3a9088f5afc278d172b7c21f79ff3e717afdbab1b9ad95c7f3cc1fe0565565d5f7b69dfdc5b34267aec3117d409c9
-
SSDEEP
24576:SypW9SgLNZaOdcTMuUvxIgo6ZW7aPFnNDJVo+5gT8QS7x7Rgw4CU32xgPRINIVRf:St9SgLNZa6xIQ9XFV0T8QS7xlgwbi2xA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e685c99c8278b136b964ef04257d62c0
Files
-
e685c99c8278b136b964ef04257d62c0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 324KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 748KB - Virtual size: 772KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 676B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ