Static task
static1
Behavioral task
behavioral1
Sample
e1ad973959a9ba179908615d2768338e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e1ad973959a9ba179908615d2768338e.exe
Resource
win10v2004-20240226-en
General
-
Target
e1ad973959a9ba179908615d2768338e
-
Size
335KB
-
MD5
e1ad973959a9ba179908615d2768338e
-
SHA1
da8309d2e53b728dcf4c050f9d5a694a4bc1836c
-
SHA256
929aa935833a2509c91026fede4b47764f103d421bc0a0285e21dd75d3667f75
-
SHA512
d0e35ee32049772377255335b5119ca2ecb88a80d8fb70061b8b1019beebbbed3cb0a9b27077e2b9b28d300a2fed95e7ec779625d1c5806daa2d5aba580aab9f
-
SSDEEP
3072:tzQgBOSOm06uNDTnFIcqvPwl+n0lLPjpymmQfRZ8XVMHluaqLIQHRhxsllD7g5Z+:thduBTnFoYl+0ZPjpyb+Ya3gmyxI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1ad973959a9ba179908615d2768338e
Files
-
e1ad973959a9ba179908615d2768338e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 255KB - Virtual size: 255KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.lz Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.vyr Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ