Static task
static1
Behavioral task
behavioral1
Sample
e206bd14f18cf3f8b2d38f0d8ce29224.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e206bd14f18cf3f8b2d38f0d8ce29224.exe
Resource
win10v2004-20240319-en
General
-
Target
e206bd14f18cf3f8b2d38f0d8ce29224
-
Size
1024KB
-
MD5
e206bd14f18cf3f8b2d38f0d8ce29224
-
SHA1
c538158c969304f592315b6e24973d1f6c594a7c
-
SHA256
08f4162032d1b53d3a57b2aba5bd4a6bfe2fc0607d375f9ddedd8d61af665273
-
SHA512
42cfe8ab08e2eceeb12ce51ea54020e6bfa2fc15794b3d423cdac13a916f2bfaa2808c4b0a64ed62902becb73b402d44d1fe47ccccdb6078d0a4c8f69f2ca6df
-
SSDEEP
24576:7hW6cWVOzGzgDIP91GjLWfDlnzxUuyfUIjep3Elgp1PEVM:lWGVOzGzgDIP91GjLWfZntyJjal/PEVM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e206bd14f18cf3f8b2d38f0d8ce29224
Files
-
e206bd14f18cf3f8b2d38f0d8ce29224.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 191B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE