Static task
static1
Behavioral task
behavioral1
Sample
e049a332cb8bce94a280040cfd069721.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e049a332cb8bce94a280040cfd069721.exe
Resource
win10v2004-20231215-en
General
-
Target
e049a332cb8bce94a280040cfd069721
-
Size
23KB
-
MD5
e049a332cb8bce94a280040cfd069721
-
SHA1
d343cc81594b62a8a873455970e2b128b24fea6f
-
SHA256
eb0620fb76c7fbcbcd3b92db17dea42c7e9774ce5c9f5ca0d9816dafe869f5e4
-
SHA512
b1837a041371d2f2c8deca13182601da26702433b59e6fda50a04801ab5a5efcb6974cced99b5f766328edf0e8c70a14f2cd6d802410736d6934aeab9850a940
-
SSDEEP
384:cyEx9TZVACctiHFIfObcWu8DzQcDtkv0sxdjujkeB1NEuPfdhDHMfFcwYplw1FVR:1qF7ifOQ3wQcCvL3FdW7KcwslAgzDBdx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e049a332cb8bce94a280040cfd069721
Files
-
e049a332cb8bce94a280040cfd069721.exe windows:4 windows x86 arch:x86
53dc661f85cee211581ed3a31c072bba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAEventSelect
netapi32
DsGetDcNameW
kernel32
ResetWriteWatch
user32
GetInputState
Sections
.text Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE