Static task
static1
Behavioral task
behavioral1
Sample
e09a116eee08edd865b06632854b5942.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e09a116eee08edd865b06632854b5942.exe
Resource
win10v2004-20240319-en
General
-
Target
e09a116eee08edd865b06632854b5942
-
Size
42KB
-
MD5
e09a116eee08edd865b06632854b5942
-
SHA1
228e949105c465ebfb45fb7e0a7d98335960b580
-
SHA256
3c8c33dbe4034256c1c0dacc8065acc05f16c9a88358e6a6b65dddbb9fda2b1c
-
SHA512
337530e3fdb1065801868234f5a2a04fb194ded305609d6970ee760964c7202458d164545779bc6233da11179853db7851c6a76023b3f179bfcedc7723066a37
-
SSDEEP
768:DgqSwYqVQuwSqdWSMuM1PTU9DgvV3m8/+Y44BtojhMb1HFuW08x:Dg9ZqVQ4ZjMgbm2CVa1N9x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e09a116eee08edd865b06632854b5942
Files
-
e09a116eee08edd865b06632854b5942.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ