Static task
static1
Behavioral task
behavioral1
Sample
e113d4ab3ba042083ac5dca0e69e4219a27fa742d0d2e4dadcd99a4313529a77.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e113d4ab3ba042083ac5dca0e69e4219a27fa742d0d2e4dadcd99a4313529a77.exe
Resource
win10v2004-20240226-en
General
-
Target
e113d4ab3ba042083ac5dca0e69e4219a27fa742d0d2e4dadcd99a4313529a77
-
Size
1.2MB
-
MD5
d6ef705abb4153b7551a7c713a79ab76
-
SHA1
15a5ef959dae452a77acb14081f1c35ff7278394
-
SHA256
e113d4ab3ba042083ac5dca0e69e4219a27fa742d0d2e4dadcd99a4313529a77
-
SHA512
cfc98e81887d31eef086b8ecedbdd5113f0baecad3ae8ea20a83ac8eed2605f211272469b1f809522d049f7fc8247ae451b4fe684e7c4bb01c66e582ec4c3b32
-
SSDEEP
24576:muTDrB9ZvPGu/N1wVMZqnPbm3T/hinQULOjnlxl9hCj/bzNSfTFac1:muzBzXB/Nrqnzmj4QPj7vhCj/bzNUa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e113d4ab3ba042083ac5dca0e69e4219a27fa742d0d2e4dadcd99a4313529a77
Files
-
e113d4ab3ba042083ac5dca0e69e4219a27fa742d0d2e4dadcd99a4313529a77.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 44KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 968KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE