Static task
static1
Behavioral task
behavioral1
Sample
e346f2c15cb9cb03b4c4d8c28c8a36f06065f4e37ec8de79995fd8526baa851a.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
e346f2c15cb9cb03b4c4d8c28c8a36f06065f4e37ec8de79995fd8526baa851a.exe
Resource
win11-20240221-en
General
-
Target
e346f2c15cb9cb03b4c4d8c28c8a36f06065f4e37ec8de79995fd8526baa851a
-
Size
4.5MB
-
MD5
16f59cfcf3a6825e3b82bcd824eae170
-
SHA1
7e08808cf7d150ac19c30703611131ca4efc47a0
-
SHA256
e346f2c15cb9cb03b4c4d8c28c8a36f06065f4e37ec8de79995fd8526baa851a
-
SHA512
1b44df8bd10f97c8b218243b4d0f127b15fa76b877453f0b27120aff9b9fc19bd224b6b180c0302c3844f1836ed5614297472879eafe5d9c8c2d6ca4892177f5
-
SSDEEP
98304:6KMuP4HOZZXSsS0MktC2Qujgu6fUbLd8SbT5TB2+:6KMugIS06ZQgu6wr7v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e346f2c15cb9cb03b4c4d8c28c8a36f06065f4e37ec8de79995fd8526baa851a
Files
-
e346f2c15cb9cb03b4c4d8c28c8a36f06065f4e37ec8de79995fd8526baa851a.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ