Static task
static1
Behavioral task
behavioral1
Sample
ExpMaper.exe
Resource
win10v2004-20240226-en
General
-
Target
ExpMaper.exe
-
Size
4.9MB
-
MD5
3afb0dfe2f220afff106426ee1aecc15
-
SHA1
d44077200c33260e1efe5372846e9420ae84a042
-
SHA256
5b694ab2ffd6f2c5af487b04d6d488f6d5fc04756a7a8d5a4e1bb1179a6efe0b
-
SHA512
1f13f817f4dc68f0098742dbb75783b6a61f368e6eed5dbe04a146c2833be16eaed2c9ef933d127efd51ae6692f2e1bb33b5e543898bd871195ede7b98a4f312
-
SSDEEP
98304:fBbBWIgWljGxRB/LLKoojOH1R1pEDFF1pbrXecaoYX6YChYG7TwVwdRXtSA:p4xRBj+oojOH1R1pEDFF1pbrXecaoYX2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ExpMaper.exe
Files
-
ExpMaper.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ