Static task
static1
Behavioral task
behavioral1
Sample
e000c484106ab41e75e261d2d79c0a74.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e000c484106ab41e75e261d2d79c0a74.exe
Resource
win10v2004-20240319-en
General
-
Target
e000c484106ab41e75e261d2d79c0a74
-
Size
200KB
-
MD5
e000c484106ab41e75e261d2d79c0a74
-
SHA1
29761ece10e7a3597d7f9f48f6a1e02f5768067f
-
SHA256
f02c7377b656e60a874aedba355206e8c81c12622fb4ff37484dc597a66ca563
-
SHA512
72da14206ac07ef3bb5f91c06b2adec4a63880878b974d4c79636b1a9768c8def7d4b978ea469cd38510fe16a8eaccc3fb6b5b61c68c1f58c47179a0ef022096
-
SSDEEP
6144:Md+0Vbn+aC1meyUGimMCORcb0fGVAo5WRP:ypjW1meyUGp/ORC0/oM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e000c484106ab41e75e261d2d79c0a74
Files
-
e000c484106ab41e75e261d2d79c0a74.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 19KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 172KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE