Static task
static1
Behavioral task
behavioral1
Sample
e1bdba8cd7ae8d8f3fe039b5ee58b88d.exe
Resource
win7-20240221-en
General
-
Target
e1bdba8cd7ae8d8f3fe039b5ee58b88d
-
Size
776KB
-
MD5
e1bdba8cd7ae8d8f3fe039b5ee58b88d
-
SHA1
b61a538cdbe88e5f9c769006147d64f93117f890
-
SHA256
b7f93fdcba04537197b4d1a307bf54da300480074376b631c82c1a2c903a5db5
-
SHA512
ff17d6743cf79d9753c4a923264ad3eeff999e6d9ed9e119e3c9b05529dddbf06797e676dfc43f3112025845c9b9f038bda2d4f562fcc9d5f43134fd2e37bfbb
-
SSDEEP
6144:J85JVCO4nPDZvWekYzl23aPfulMJyn/2ENzDScV33TKtJWTlksz/DrPwjqh3O2oC:JqVCjDZuyTSMGJ3TKTmFDzPMar0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource e1bdba8cd7ae8d8f3fe039b5ee58b88d
Files
-
e1bdba8cd7ae8d8f3fe039b5ee58b88d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 774KB - Virtual size: 774KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ