Static task
static1
Behavioral task
behavioral1
Sample
e08aacec4540c4f0d2f100a58bd2b70c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e08aacec4540c4f0d2f100a58bd2b70c.exe
Resource
win10v2004-20240226-en
General
-
Target
e08aacec4540c4f0d2f100a58bd2b70c
-
Size
2KB
-
MD5
e08aacec4540c4f0d2f100a58bd2b70c
-
SHA1
39c4e58bbac50593f3f5a6317a934b0e410781b2
-
SHA256
e11d927f693106bd4a1ae1e001d82dac763e9ae86fa16d14df9caad1246785a3
-
SHA512
a950368187b7004008d44681fd31e80bc37a888269fc749eb2c83d3f436a02d973f1172353eb1e3fa62c0dee6fc42d87a2652c1d9d63a7a77b9931f749327ad0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e08aacec4540c4f0d2f100a58bd2b70c
Files
-
e08aacec4540c4f0d2f100a58bd2b70c.exe windows:4 windows x86 arch:x86
3746289c4eaccde50b67772f5be2fb9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetModuleFileNameA
GetModuleHandleA
QueueUserAPC
SleepEx
TerminateProcess
CreateThread
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 242B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ