Static task
static1
Behavioral task
behavioral1
Sample
e2cb928861cfd3963bdf37904415bfa18c700de49f3d2b4b8e9c65f34ddc12f1.exe
Resource
win7-20240220-en
General
-
Target
e2cb928861cfd3963bdf37904415bfa18c700de49f3d2b4b8e9c65f34ddc12f1
-
Size
65KB
-
MD5
3bc3ab8bf1682877347a34dd3f3c974b
-
SHA1
2f8d02d662da5d757d3803793421f479020cc861
-
SHA256
e2cb928861cfd3963bdf37904415bfa18c700de49f3d2b4b8e9c65f34ddc12f1
-
SHA512
8b7681b50346e07726653113ef1cae49a4a489f4d4290f6d67079854e55e8465509f9b8b3b1db9ebdb90e462818589421975a91f796a56890e4312ad72262c34
-
SSDEEP
1536:iHbm0ViPD79+OTPemAtbH90JHNN5NuO/pcVOfM3RBiToYA:iXasOTPHQ0JX5NuNVOEBMM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource e2cb928861cfd3963bdf37904415bfa18c700de49f3d2b4b8e9c65f34ddc12f1
Files
-
e2cb928861cfd3963bdf37904415bfa18c700de49f3d2b4b8e9c65f34ddc12f1.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE