Static task
static1
Behavioral task
behavioral1
Sample
e1811b9df125b13417501801feb01faf.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e1811b9df125b13417501801feb01faf.exe
Resource
win10v2004-20240226-en
General
-
Target
e1811b9df125b13417501801feb01faf
-
Size
12KB
-
MD5
e1811b9df125b13417501801feb01faf
-
SHA1
c317430b19064fdddcf1c6f2643072ca7a16b2cb
-
SHA256
623e372db2e06b41f0325ccbc1e898540d5edad2bd98f389d226cbdd4bcc1797
-
SHA512
d583098f8f62d795710fc5dd54adc33854db8214db23a04264b2208c82f69e4febb6536d241d4e6540c8371b79075c7bcbf48f507c832bc3229840a79fea3074
-
SSDEEP
96:G4wgJbRgJDIlGXRZE17oWECPS4A4USiySs8s2:+gVqIckyWL8s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1811b9df125b13417501801feb01faf
Files
-
e1811b9df125b13417501801feb01faf.exe windows:4 windows x86 arch:x86
eb27c9d14677bb4eb4140a35d19ebb55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord526
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ProcCallEngine
ord570
ord100
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ