Static task
static1
Behavioral task
behavioral1
Sample
e0600fa2eed4d6728581e62b13a4d984.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e0600fa2eed4d6728581e62b13a4d984.exe
Resource
win10v2004-20231215-en
General
-
Target
e0600fa2eed4d6728581e62b13a4d984
-
Size
37KB
-
MD5
e0600fa2eed4d6728581e62b13a4d984
-
SHA1
924f91983615b97b9dc2d3e16aa67f154b999a4c
-
SHA256
caa2abfada67fb38bd4717cc1090828c56e7d69295910a5c0141a8f2df15507f
-
SHA512
fd7161e484bd521e5c9b278f78510f46ab79e9d2a1925ee752add877c5718f487e76a6ed7cafff5952365c03541e96fa82320989f8ecb354c30bdbcec3afbea5
-
SSDEEP
768:8dP5LwFQjGagYSSjQk4SrrC3O5Pb8PpGQdJyy:8dP5PjT3z4ArC+5P0Tr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0600fa2eed4d6728581e62b13a4d984
Files
-
e0600fa2eed4d6728581e62b13a4d984.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE