Static task
static1
Behavioral task
behavioral1
Sample
e5a4738de69040a176db92bbe2f8fdfae9e0df9b7e0719f9cea75862cbf6c120.exe
Resource
win7-20240221-en
General
-
Target
e5a4738de69040a176db92bbe2f8fdfae9e0df9b7e0719f9cea75862cbf6c120
-
Size
1.8MB
-
MD5
8d05ec511c5353799a6a7b4768bdc473
-
SHA1
c048f11d5850b234624a9de0ee27439f7c03acd1
-
SHA256
e5a4738de69040a176db92bbe2f8fdfae9e0df9b7e0719f9cea75862cbf6c120
-
SHA512
b588ecfafdf26a9a1fe492348129eaeb097a51d493173b13dc0fc59ff16edd8b7f42401495e14b54f8f4c8cbd4e600b0837f22efb8c1a8249927183e4afb8bc8
-
SSDEEP
49152:4w909BRmhnGng2jYFJAwPtmXShMpKCXuB/t:4w9097m28dmk/p5t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e5a4738de69040a176db92bbe2f8fdfae9e0df9b7e0719f9cea75862cbf6c120
Files
-
e5a4738de69040a176db92bbe2f8fdfae9e0df9b7e0719f9cea75862cbf6c120.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fmkngcvr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mkkmgtvd Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE