Static task
static1
Behavioral task
behavioral1
Sample
e03d635bab3181b4dd5429ca6efa8ace.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e03d635bab3181b4dd5429ca6efa8ace.exe
Resource
win10v2004-20240226-en
General
-
Target
e03d635bab3181b4dd5429ca6efa8ace
-
Size
15KB
-
MD5
e03d635bab3181b4dd5429ca6efa8ace
-
SHA1
0c5cffb57af537d975c457ee53acdd729460c69e
-
SHA256
e07382a856a233b76a370b15be604ff69b5e93537dadfa2a46978114794501a6
-
SHA512
e17802177d97a283da4a5bf8cc78be763546c9aa4916119afdb81a3d77aced15d187f0df017d12abf37593706036670c5a8775b9b37d9efd8e13a99c51681e88
-
SSDEEP
192:bSPBvgqzrxS/XEUzwLxYfs+6aRGjaoTq7hBLPpsGHCFIlGqg1EI/:+PNdrxS/7w9YkvakrT8rLPa4sKQJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e03d635bab3181b4dd5429ca6efa8ace
Files
-
e03d635bab3181b4dd5429ca6efa8ace.exe windows:5 windows x86 arch:x86
b44a0943280fa0f7ecd4efa707020fe4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
LoadIconA
advapi32
RegOpenKeyW
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ