Static task
static1
Behavioral task
behavioral1
Sample
e215d8a6dfbb05b9d74959334b878c41.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e215d8a6dfbb05b9d74959334b878c41.exe
Resource
win10v2004-20240226-en
General
-
Target
e215d8a6dfbb05b9d74959334b878c41
-
Size
907KB
-
MD5
e215d8a6dfbb05b9d74959334b878c41
-
SHA1
c46628f460989c024af83759fc966c17adc35b30
-
SHA256
b3b93a90e64be082600f56bf8fcc5876ea1066766b0b9088c48e8c08157d99c5
-
SHA512
b210650bef03588dd15ddde93548e974aa8f84d5d3caa64a0f04af158b8583e52e53ea479295e7570c27e0f82f9708bd65c6af939781a60df6d1ac8c7d760bc4
-
SSDEEP
24576:LF1rAqDRiXhS7o/E/zrot308YRYRP9a/ZS1:B1rJOyCIz0tE8YKRP9gS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e215d8a6dfbb05b9d74959334b878c41
Files
-
e215d8a6dfbb05b9d74959334b878c41.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 720KB - Virtual size: 719KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ