Static task
static1
Behavioral task
behavioral1
Sample
e0de50af7c9596682006c4e00599a9f6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e0de50af7c9596682006c4e00599a9f6.exe
Resource
win10v2004-20240319-en
General
-
Target
e0de50af7c9596682006c4e00599a9f6
-
Size
82KB
-
MD5
e0de50af7c9596682006c4e00599a9f6
-
SHA1
b4c17b26bd944ff6a4b941c8d526ec898c1e0bd6
-
SHA256
a510404762a07b0662db430189b0cfa1dc14d9f259d62e45c8328be1552effe6
-
SHA512
ac0f831334aacffada375fbb2ae9c81d6c5821330c500c8c029ca267c8341a6958a1f80e6d0f9f8adc209d801a47143a5a2aae28bd659af9e19bfb98651524fc
-
SSDEEP
1536:b4mdbdIiUhY4aX/LJxTdP5Iw+j+mCWm2X+mT+Hb92xq5m0pjlpInmr88:5dKbCR1HJO+mCh2Om29BzpBZA8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0de50af7c9596682006c4e00599a9f6
Files
-
e0de50af7c9596682006c4e00599a9f6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ