Static task
static1
Behavioral task
behavioral1
Sample
e1426bb5e8ff075a4acd3de7e6e355d3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e1426bb5e8ff075a4acd3de7e6e355d3.exe
Resource
win10v2004-20240226-en
General
-
Target
e1426bb5e8ff075a4acd3de7e6e355d3
-
Size
60KB
-
MD5
e1426bb5e8ff075a4acd3de7e6e355d3
-
SHA1
7b24ab6fd55af4fdd72d1b9d9f53cd3c23869232
-
SHA256
f57a7e0cb52f4fd86fd24b63a36459d96c0b7802858131e8dd3cc472cdc67a40
-
SHA512
1a24f598762015b97fdd6d0f0f695d8ccca410307dffb30c91c491c55b7f658d2dbbb6c752b4b719b2506390be566a7efd9829d7b56330d6317da6a329e23373
-
SSDEEP
768:csdMRGLF2Wr7oRROivJJOwfBwggwfNUp1R:cUlBr7oRYiJQCwv6Spj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1426bb5e8ff075a4acd3de7e6e355d3
Files
-
e1426bb5e8ff075a4acd3de7e6e355d3.exe .vbs windows:1 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Sections
AUTO Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DGROUP Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ