Static task
static1
Behavioral task
behavioral1
Sample
e005799210471db461b8a6496104fc3e.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e005799210471db461b8a6496104fc3e.exe
Resource
win10v2004-20231215-en
General
-
Target
e005799210471db461b8a6496104fc3e
-
Size
904KB
-
MD5
e005799210471db461b8a6496104fc3e
-
SHA1
c88e04e0001b4f85d6e39a2ae4412bcd51e29684
-
SHA256
e4edb21d42809561035cf8a93ea284bd435dbdc362909ec7f5bea8d0371a31e6
-
SHA512
b2e54a8c6cfeeb9055556feb43f9fd8abd7e0061be08661402d9253838cbbe8f6a3d667d77a4c1ce920c76a090af945e76bfaeaa6ccac118c985c950cdb98318
-
SSDEEP
24576:WTirlR/K0zzzLLyXp2aeEUJP7k5bqpPu7b9om60H:WTirld7JkYP7v0Cm6y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e005799210471db461b8a6496104fc3e
Files
-
e005799210471db461b8a6496104fc3e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE