Static task
static1
Behavioral task
behavioral1
Sample
e1e168ea2cdf772d6401c886d8efb27c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e1e168ea2cdf772d6401c886d8efb27c.exe
Resource
win10v2004-20240226-en
General
-
Target
e1e168ea2cdf772d6401c886d8efb27c
-
Size
742KB
-
MD5
e1e168ea2cdf772d6401c886d8efb27c
-
SHA1
68efc229b6f1068f4804aee5e70835ad67a07086
-
SHA256
cfb5af90d2571b3f5ce08337ce7eef8c2e2c441f2ecd715148dccd876b125398
-
SHA512
134c9f3042b82ac23f395ef4dc9491fe109d0d535d2731fceeeaa4dfefcf7e64cee55ee0be2b7b5272f0f201618985716dede4bad88fb0e5d2652fda71e28f9b
-
SSDEEP
12288:ZCJK0qjIQnAYwPzSfruDhGK0qjIQnAYwPzSlt2t4FXOWQevz0u:YK0qjIGAYwP+TsGK0qjIGAYwP+Wt4hOE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1e168ea2cdf772d6401c886d8efb27c
Files
-
e1e168ea2cdf772d6401c886d8efb27c.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 17.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE