Static task
static1
Behavioral task
behavioral1
Sample
e0d49e3b9e0c3d6d462dbc263d9d118a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e0d49e3b9e0c3d6d462dbc263d9d118a.exe
Resource
win10v2004-20231215-en
General
-
Target
e0d49e3b9e0c3d6d462dbc263d9d118a
-
Size
106KB
-
MD5
e0d49e3b9e0c3d6d462dbc263d9d118a
-
SHA1
8ece9480c0574e3670f24415db765fe3abd684c5
-
SHA256
d12caa71284edcd9b0bebf8d366c9ccd6830929331200c9a3b5ea503667478c1
-
SHA512
19d92d4921da80bd3b68f02ab4b4daae066c48e9448c29166a05a2b5d4dc48460142df41652278a757ac9539f34415ef72137e9d458924fb2b777c822d2fe821
-
SSDEEP
1536:wdMPiAVZJQmEyGMHO92rODxoECieoGt4INuR1n2HtNAEeeISJfsbO+V5I3K7Ulvt:Y2iAVPCN9s2hIFvALqKbO+V5cBdMdjQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0d49e3b9e0c3d6d462dbc263d9d118a
Files
-
e0d49e3b9e0c3d6d462dbc263d9d118a.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
dhdfhhd Size: 99KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE