Static task
static1
Behavioral task
behavioral1
Sample
e17366f06b94957833daa1c7121ef6ac.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e17366f06b94957833daa1c7121ef6ac.exe
Resource
win10v2004-20240226-en
General
-
Target
e17366f06b94957833daa1c7121ef6ac
-
Size
316KB
-
MD5
e17366f06b94957833daa1c7121ef6ac
-
SHA1
3e79f407adc0d02fface2346def9b7c1ea206761
-
SHA256
f6def83874ea134687d6358d59563a4c0101e1d73ac5a2ef5cab12980d755d0c
-
SHA512
979fefe26662ed2befb3a1926a2bf17402537a6e9fded3c53f8f0fd2822b57bac2714764a05d809f458f195f6bb35beb46a5ac6a7df52c6bbe1b569f0c646829
-
SSDEEP
6144:SBXnk8JqQj72KwULls4I+xbjRrvs0/E1JKHTAXNqxtNyoOYJ1WLyCNQF1Odb8f:4X7J7f2KwL4I+VVH/E1J6TaNqfyYDywj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e17366f06b94957833daa1c7121ef6ac
Files
-
e17366f06b94957833daa1c7121ef6ac.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 815B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tss Size: - Virtual size: 3.0MB
.adata Size: - Virtual size: 464KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.info Size: 311KB - Virtual size: 312KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE