Static task
static1
Behavioral task
behavioral1
Sample
e19a16245210b11ea4a5142e9dfc07bb.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e19a16245210b11ea4a5142e9dfc07bb.exe
Resource
win10v2004-20231215-en
General
-
Target
e19a16245210b11ea4a5142e9dfc07bb
-
Size
342KB
-
MD5
e19a16245210b11ea4a5142e9dfc07bb
-
SHA1
62f77b41b2215a05f41da71f7b0facc31c280179
-
SHA256
ea81d00d41fc81cddffe8a4bcc52a118b50880a954c08f7d871bed1f2355a2ed
-
SHA512
5f3c1d9f2b902c44169e1451cbf4af3325f8a0f393cd1b6897db3b36c63f83737040e2a183444c89c5b404792babc324a8741c828ad4eee5ec1917bc8e17106c
-
SSDEEP
6144:U1JPiBB5dvkzvCUUQUb8UVFjkPZVcLVs1i4Lj4S3hhg+GLXZ3d/QwCpc4ZJH7k0+:UXa5dvkxUQ9UVFjkPZ2VgiU8qhsLPQ1E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e19a16245210b11ea4a5142e9dfc07bb
Files
-
e19a16245210b11ea4a5142e9dfc07bb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 237KB - Virtual size: 430KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Prt Size: 5KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE