Static task
static1
Behavioral task
behavioral1
Sample
e0b4787c3dcf692c4890b865a0b45d48.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e0b4787c3dcf692c4890b865a0b45d48.exe
Resource
win10v2004-20240226-en
General
-
Target
e0b4787c3dcf692c4890b865a0b45d48
-
Size
17KB
-
MD5
e0b4787c3dcf692c4890b865a0b45d48
-
SHA1
5db409e215bbf2547cbd3f7e60df20062c1f3203
-
SHA256
a43e678c0c83f89a89991b7c49b057749a0c8128162c35e9cf810522ee083e35
-
SHA512
df0de98b2af892620da8a04b766024b7ee55ebfea9310b6a854a3f6f814f1dcbd064db57f5631eccff7afe7ea03847eb2697e4110f13fd5910776a9ea08401b4
-
SSDEEP
96:2cEgawYbK4cuhLJ7c05I1bQr/z3I5hvB5rzvdWrQ:HaZbK5uhVpIN4k5hvB7eQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0b4787c3dcf692c4890b865a0b45d48
Files
-
e0b4787c3dcf692c4890b865a0b45d48.exe windows:4 windows x86 arch:x86
c162473f2b23a9ebcac3fd8a0fcf7b1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ