Static task
static1
Behavioral task
behavioral1
Sample
e1971c506e2a7c67602e3090c3818990e6b5de905d6e4ae1c2d058886b9cf76b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
e1971c506e2a7c67602e3090c3818990e6b5de905d6e4ae1c2d058886b9cf76b.exe
Resource
win10v2004-20231215-en
General
-
Target
e1971c506e2a7c67602e3090c3818990e6b5de905d6e4ae1c2d058886b9cf76b
-
Size
458KB
-
MD5
b4196280bd13a4d99c99dabd794c7443
-
SHA1
a3ba5365b92d63f04803f5aaa8e71f8b6b679eba
-
SHA256
e1971c506e2a7c67602e3090c3818990e6b5de905d6e4ae1c2d058886b9cf76b
-
SHA512
5673bd69f4ff09f423500ce65b5206d2dfed75d4c246ec9535b740c687adb38e24b769fa5bd9ebac7d2e6d1289498fc9a99f3555b9514c13b852717c3e8271e8
-
SSDEEP
3072:d5A/Vhw6dOoE7QKedJUq8IWzzEdWKE7QKedJUq8IWzzEdWrHHAXq5+:uhDdOoEcKe/UPBKEcKe/UPBjHA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1971c506e2a7c67602e3090c3818990e6b5de905d6e4ae1c2d058886b9cf76b
Files
-
e1971c506e2a7c67602e3090c3818990e6b5de905d6e4ae1c2d058886b9cf76b.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ