Static task
static1
Behavioral task
behavioral1
Sample
e86848dc1f1c3ca7e9f726aa3b36170c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e86848dc1f1c3ca7e9f726aa3b36170c.exe
Resource
win10v2004-20231215-en
General
-
Target
e86848dc1f1c3ca7e9f726aa3b36170c
-
Size
18KB
-
MD5
e86848dc1f1c3ca7e9f726aa3b36170c
-
SHA1
d33d42be61fe2230daf4efc503590123f8fa8fec
-
SHA256
6344d82c38c95c953883dca1ce28973222af98ded057ca00949a7eafae8bda6c
-
SHA512
46818d72f9c9fa9ea0932660990625bd3d9319129b40efa72495e1f4d3eb719e270e1e985c7900a212488cb13d4d7a9006ccb5bbc578c68269727ccc57cf2535
-
SSDEEP
384:Ejb9wlwe+xARbyED/O3D9IRO3lj7lWtlKMNtwPlh:65kNby2/OT9IRO3XWtldw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e86848dc1f1c3ca7e9f726aa3b36170c
Files
-
e86848dc1f1c3ca7e9f726aa3b36170c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 320KB - Virtual size: 39.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ