Static task
static1
Behavioral task
behavioral1
Sample
e0aaa33b93c9be81175fa798e9b23b77.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e0aaa33b93c9be81175fa798e9b23b77.exe
Resource
win10v2004-20240226-en
General
-
Target
e0aaa33b93c9be81175fa798e9b23b77
-
Size
57KB
-
MD5
e0aaa33b93c9be81175fa798e9b23b77
-
SHA1
821d2cac4e2948200a869241b8d6ef7451842467
-
SHA256
a73ef9e9ac74d6a3e379514758c4a7e92cf7fd3dd116d25faf689293af7609f0
-
SHA512
13b64006277ba41c211b1d8260c101d9072b4a04275065fe0dba05a0180e36e85ffd9f8474801231220fe17e4fc1aea177e37ab3684a5f52746d043f92496907
-
SSDEEP
1536:M+f+ozh2A/KwaulUOCvuZYZRVYr0YYQc5qh0e:ThLzau3KaQEI2N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0aaa33b93c9be81175fa798e9b23b77
Files
-
e0aaa33b93c9be81175fa798e9b23b77.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 47KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE