Static task
static1
Behavioral task
behavioral1
Sample
e0b5b1744fce953d1d04bed4f943b719.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e0b5b1744fce953d1d04bed4f943b719.exe
Resource
win10v2004-20240226-en
General
-
Target
e0b5b1744fce953d1d04bed4f943b719
-
Size
14KB
-
MD5
e0b5b1744fce953d1d04bed4f943b719
-
SHA1
5499587bec29a54b3998bb3ec9e4478ac0587cf0
-
SHA256
61c63e3d76e9cb9ee81bf0654a5f4ea333950d7e9088ec10ccf2c99a1ee6cfb3
-
SHA512
9df7a42f9acb3a623d6c56187a3cd3cd59acb0c6d7e16be78a74a800973541af9b9b479deb592f8d6d550206197123851a4e9501c2fe7a3b9353500b9b60266c
-
SSDEEP
192:zCb8W3l0vdV+Sd6m5x+fTis1+he6si5twNKp7P8MYYPG4ewXWgpCUgw0Y2zmsJW0:uD2vDfd6mm7V1+Q1lKpoMlX3cuF50
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0b5b1744fce953d1d04bed4f943b719
Files
-
e0b5b1744fce953d1d04bed4f943b719.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�{H0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�{H1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�{H2 Size: 13KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE